Managed Rules (previous version) are blocking access

General Rules
1

What is the name of the domain?

anistia.org.br

What is the issue you’re encountering

I receive event messages informing me that managed rules (previous version) are blocking access. I have already created custom rules, rules in the managed rules tab, I have added the pth URI to the exception of the managed rules and I have even disabled “Cloudflare managed ruleset” and “Cloudflare Owasp Core Ruleset”. If we have accepted the upgrade to managed rules, why are the “Previous version” rules still blocking? How can I definitively resolve this so that access to the URI path “/wp-json/wp/v2/campanha” is no longer blocked by managed rules (previous version)? How can I manage rules from a previous version if the dashboard has been updated?

Screenshot of the error

Captura de tela 2024-12-09 133825.jpg
Captura de tela 2024-12-09 133825.jpg967×710 77.6 KB

2

Try disabling previous version using a PATCH call to the zone settings API end-point: Cloudflare API | Zones › Settings › Edit Zone Setting

curl --request PATCH \
  --url https://api.cloudflare.com/client/v4/zones/{your_zone}/settings/waf \
  --header 'Authorization: Bearer {your_token}' \
  --header 'Content-Type: application/json'
    -d '{
      "id": "waf",
      "value": "off"
    }'
4

Hi ncano.

Thank you for your tip.

How can I get “My_Zone”?

This token (your_token)
Isn´t a way to disable all managed rules (previous version)? If can´t manage I can´t use.

5

You can find your zone id and create a token by following Create API token · Cloudflare Fundamentals docs. The API call I provided above will disable all managed rules of the previous version, and leave only the new version of WAF running on your zone.

1 Like