I have bot mode switched on but need to grant access to a bot for an API connection

[user23115]

What is the name of the domain?

motiontalentmgmt.com

What is the issue you’re encountering

I have bot mode switched on but need to grant access to a bot for an API connection but can’t figure out how to do this

What steps have you taken to resolve the issue?

adding user agent and query string to WAF

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Flexible

[cloonan]

@user23115

figure out how to do this

What have you tried?

I’d create a WAF rule to allow the bot, something like this

You’d need to determine on what parameter you’d want to allow the bot, ASN or IP both seem like good places to start, you can find that detail here in your event log if you don’t already know it

[user23115]

thanks!

The problem is I’ve tried both and neither worked.

The API call is being done by a bot and it’s using dynamic/rotating Amazon server IP addresses.

I don’t really want to disable the bot blocking mode as this will open the floodgates for unwanted traffic and drain my server resources.

[cloonan]

@user23115

both

I only see a couple of ASNs, I think just one challenged by bot fight mode.

You could also edit your user agent allow rule and try checking all the options under More components to skip