Managed Challenge issue

Website, Application, Performance Security
1

hi all

i have set up firewall rule a few months ago to challenge all users with “Managed Challenge”

111111
111111697×689 63 KB

It worked without problems when I did it, but about a week ago, the interface that checks visitors on my site has been changed…

the old one:

f14fb030946bd5e44aa77fa7a0f4bf53136238f5
f14fb030946bd5e44aa77fa7a0f4bf53136238f51600×900 125 KB

the new one:

new
new1593×755 65.5 KB

and the new ones can never be bypassed, I even tried VPN, It’s like a “Block” not “Managed Challenge”

I added my Home IP at “Tools” inside “WAF” make it ‘allow’, but it’s no longer works!

“Firewall Events” shows my IP as “2a06:98c0:3600::103” it’s not my IP, It’s Cloudflare London
my ip is IPv4 and this is IPv6 (i try VPN same IPv6 showing again)

The problem occurred without any intervention from me, everything was working normally for many months, just a week ago this all happened.

Does anyone have any idea?

2

Seems like a new challenge page, I agree that the button isn’t that obvious at first but, your visitors should be fine after they click it.

3

This is not the problem, after pressing it appears hCaptcha and after solving it you will never be able to skip that checking page!

Tried more than one browser and more than one computer and VPN

1 Like
4

Could be an error on the challenge page. Do you have a video?

5

I am able to reproduce too, it’s an infinite challenge loop.
Have cleared cookies, disable AdBlock, etc.

6

@user18298

yes i did no cache, no add-ons on the browser, I tried another browser, all with the same problem…

the only solution to enter the site now is to disable the firewall rule.

7

Just to confirm:

  1. Are you the owner of the site?
  2. Does the dashboard show any meaningful information?
  3. Does the website work if you remove the firewall rule?
  4. Did you create a ticket with CF? If not, can you make one and post the # here?
  5. Does your website work without CF enabled?
8
  1. Are you the owner of the site?
    yes
  2. Does the dashboard show any meaningful information?
    no and this problem occurs on all domains on my account check here: https://in1.me/
  3. Does the website work if you remove the firewall rule?
    yes it work
  4. Did you create a ticket with CF? If not, can you make one and post the # here?
    #2515364
  5. Does your website work without CF enabled?
    yes
9

I escalated the ticket, hopefully you will hear back from CF soon.

In the meantime, can you try changing the action from Managed Challenge to JS Challenge?

1 Like
10

JS Challenge & Legacy CAPTCHA

showing the same page

2 Likes
11

Same issue, i am having. even i am not able to bypass the challenge, the challenge is showing infinite times. Tried on different browsers with VPN on and off.

12

I tried to change to javascript challenge. but still the new challenge page is showing infinite times. No way to bypass. Meanwhile Legacy Captcha works fine.

13

support replay on ticket #2515364:

"Thank you for contacting Cloudflare Support, I’ve brought your inquiry to the attention of the Community team. Customer Support is currently experiencing an extremely high demand for free services and email support is prioritized for paying customers.

As a Free customer, you can still get great support for general questions and basic troubleshooting in our Community. And, you have full access to our detailed troubleshooting guides in the Help Center and our Developer Center documentation."

@user13760

I’m sure the bug is after the update, I hope they check the problem. at the moment I disabled WAF protection for my site to make it work.

14

make use of Legacy Captcha, it works and I could bypass it sometimes.

15

it show the same page (infinite loop)

even “Under Attack mode” keep reloading the page…

16

This issue has been escalated urgently to Support.

6 Likes
18

Same issue here, after solving captcha the site is not displayed. Tried different challenges but the only thing that works is turning off the waf rule.

19

Thanks for reporting this. If anyone else has this issue please let us know here and ideally include the domain/URL we can reproduce this on.

1 Like
20

Here is an example

www searchenginelinks co uk / contact.html

22

Disabled Zaraz and issue not recurring.