Payment gateway IP communications blocked (Redsys)

Website, Application, Performance Security
1

What is the name of the domain?

What is the error number?

499

What is the issue you’re encountering

I need to receive requests from the following IPs: 195.76.9.222 and 195.76.9.187. These IPs are from Redsys, a payment gateway in Spain. And sometimes, they get 499, it’s not consistent, but it started to happen daily since a few days ago.

What steps have you taken to resolve the issue?

I created a custom WAF rule to skip these IPs. But it does not work consistently, it still fails from time to time.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

2

Upon checking in firewall events, it appears that traffic from source IP addresses 195.76.9.222 and 195.76.9.187 is being appropriately bypassed by the configured WAF rule. To confirm this, you can navigate to Dashboard > Security > Events and apply filter for the specific source IP addresses to verify the skipped actions. Could you please review the connection timeout setting on origin server and increase the timeout threshold can help ensure that requests have sufficient time to complete?

For detailed information on 499 error, kindly refer to the documentation here: 4xx Client Error · Cloudflare Support docs

3

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.