i have set up firewall rule a few months ago to challenge all users with “Managed Challenge”
It worked without problems when I did it, but about a week ago, the interface that checks visitors on my site has been changed…
the old one:
the new one:
and the new ones can never be bypassed, I even tried VPN, It’s like a “Block” not “Managed Challenge”
I added my Home IP at “Tools” inside “WAF” make it ‘allow’, but it’s no longer works!
“Firewall Events” shows my IP as “2a06:98c0:3600::103” it’s not my IP, It’s Cloudflare London
my ip is IPv4 and this is IPv6 (i try VPN same IPv6 showing again)
The problem occurred without any intervention from me, everything was working normally for many months, just a week ago this all happened.
Does anyone have any idea?
Seems like a new challenge page, I agree that the button isn’t that obvious at first but, your visitors should be fine after they click it.
This is not the problem, after pressing it appears hCaptcha and after solving it you will never be able to skip that checking page!
Tried more than one browser and more than one computer and VPN
Could be an error on the challenge page. Do you have a video?
I am able to reproduce too, it’s an infinite challenge loop.
Have cleared cookies, disable AdBlock, etc.
yes i did no cache, no add-ons on the browser, I tried another browser, all with the same problem…
the only solution to enter the site now is to disable the firewall rule.
I escalated the ticket, hopefully you will hear back from CF soon.
In the meantime, can you try changing the action from Managed Challenge to JS Challenge?
JS Challenge & Legacy CAPTCHA
showing the same page
Same issue, i am having. even i am not able to bypass the challenge, the challenge is showing infinite times. Tried on different browsers with VPN on and off.
support replay on ticket #2515364:
"Thank you for contacting Cloudflare Support, I’ve brought your inquiry to the attention of the Community team. Customer Support is currently experiencing an extremely high demand for free services and email support is prioritized for paying customers.
As a Free customer, you can still get great support for general questions and basic troubleshooting in our Community. And, you have full access to our detailed troubleshooting guides in the Help Center and our Developer Center documentation."
I’m sure the bug is after the update, I hope they check the problem. at the moment I disabled WAF protection for my site to make it work.
make use of Legacy Captcha, it works and I could bypass it sometimes.
it show the same page (infinite loop)
even “Under Attack mode” keep reloading the page…
This issue has been escalated urgently to Support.
Same issue here, after solving captcha the site is not displayed. Tried different challenges but the only thing that works is turning off the waf rule.
Thanks for reporting this. If anyone else has this issue please let us know here and ideally include the domain/URL we can reproduce this on.
Here is an example
www searchenginelinks co uk / contact.html
Disabled Zaraz and issue not recurring.