Rule to bypass WAF

Website, Application, Performance Security
1

What is the name of the domain?

na

What is the error number?

na

What is the error message?

na

What is the issue you’re encountering

I use WHMCS and having issues with callback from api1.whmcs.com being blocked by cloudflare. I cannot just allow the IP as this can change, so I need to either allow api1.whmcs.com or exclude the URL /modules/gateways/callback/gocardless.php from WAF. The DOCS seem to be outdated, as everything mentioned there no longer seems to exist.

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

2

Hello,

Are you following the documentation to create a custom WAF skip rule?

You can also be more selective on the rules you are skipping, if you check to see what is blocking your call.

You can search your security events by rayID to see what is causing the issue: