How to turn off "under attack mode" for site?

Security
#1

I had my site placed on “under attack” mode. I tried to disable it completely but the page shows a red banner below with regards to “enterprise”.

The 'under attack mode" needs to be turned off completely as we have a repository in a specific file inside the site’s directory and the captcha is blocking access to the files. Do I need to upgrade in order to do this?

Thank you

#2

Post a screenshot of https://dash.cloudflare.com/?to=/:account/:zone/security/settings as well as a screenshot of the page you are referring to.

#3

Thank you,

The blocked access is to a folder within the site’s files and does not have an actual “page”.

Below is what I received:
"Your RePEc archive at Index of /RePEc/new is protected by a Captcha. This prevents our automated process from mirroring your data.

You must disable the Captcha (or anything that relies on Javascript) for the RePEc archive for us to be able to continue to include your content in RePEc services."

#4

That is not the page I posted.

1 Like
#5

Kindly, check below screenshots and navigate to the same screens, reply back to us with which settings you’ve got selected for particular options:

  1. Dashboard - Overview tab:
    first
    first1131×464 26.7 KB
  • on the right site you’ll see “Under attack mode” option to enable/disable (gray - disabled, green - enabled)
  1. Security → Settings tab:
    second
    second1630×810 44.8 KB
  • from the dropdown menu, in the above example we see “Medium”, you might have something different?
  1. Page Rules tab:
    third
    third1636×831 36.2 KB
  • in above example, currently no custom Page Rules used (in case if someone might set something different for some particular URLs)

From your posted screenshot, if those “blocked/challenged” requests come from your origin host/server IP, then I’d suggest you to whitelist it by adding your server IP to the Security → Tools → IP Access Rules with the action “allow” for your Website.

#6
#7

You still have the mode enabled and need to disable it. You can set it to Off (as the message suggests), but you can lower it to “Medium” for example.

1 Like
#8

Below is the screenshot you requested:

Below is a current screenshot to my dashboard:

Does this mean that the captcha is now off/disabled completely?

#9

The JavaScript challenge won’t be shown to every client any more.

#10

I have no page rules enabled. Should I?

#11

That’s a separate question and should be handled in a different thread.

#12

Ok, I get that it won’t be shown on the website, but will the files still be accessible?

#13

Of course, Cloudflare will proxy everything and apply security measures only according to your security level.

#14

So my current security levels shown in the screenshots I provided will not proxy folders or will?

#15

Whether something is proxied or not does not depend on the security level.

Your issue was that you issued a JavaScript challenge to each client. By changing the security level, that should not happen for each client any more.

I’d strongly recommend to check out support.cloudflare.com.

#16

Thanks for your help

#17

I was directed to “pause” Cloudflare service by Dreamhost. Will pausing the site on Cloudflare prevent the captcha/js issue? Dreamhost could not answer and asked for Cloudflare assistance on this.
Please clarify
thank you

#18

That will pause Cloudflare and yes, as Cloudflare won’t be proxying your site any more, there won’t be challenges either.

#19

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.