Rules on Security are not working as expected

Website, Application, Performance Security
1

What is the name of the domain?

What is the error number?

403

What is the issue you’re encountering

rules are not working

What steps have you taken to resolve the issue?

pause cloudflare

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

now cloudflare is paused. but if you run it our third party partner won’t be able to “confirm” orders payment because of Cloudflare. They need to call their API on our server to communicate the result of their process.

We put this rules : (ip.src eq 52.29.68.50) or (ip.src eq 18.196.218.150) or (ip.src eq 18.158.89.154) or (ip.src eq 54.195.131.90) or (ip.src eq 52.49.220.119) or (ip.src eq 54.220.89.122) or (http.request.uri.path contains “/wc-api/aplazame/”) or (http.request.uri.query contains “?path=/confirm/”) but the 403 errror was still fired… we put in pause cloudflare and soon a call was ok, precisely on 19:15 of the 19/12/2024… so the reason of the 403 is cloudflare. We don’t know how to grant that third party to call without any issue the API… can you help me?

2

Check your security event log for the reason the request is blocked…
https://dash.cloudflare.com/?to=/:account/:zone/security/events
…then adjust the WAF rule accordingly.

Use only “Full (strict)” or “Strict” so Cloudflare validates your origin SSL certificate and the connection is fully secured.

4

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.

5

What is the name of the domain?

What is the error number?

403

What is the issue you’re encountering

the rules I put are not granting the traffic I want to allow

What steps have you taken to resolve the issue?

as described in the past ticket Rules on Security are not working as expected I analized all the events and put new rules but cloudflare is still blocking my traffic from the third party platform I want to permit… and all is working when GF is paused… this was a blocked call example 2024-12-26-16-41-57 hosted at ImgBB — ImgBB

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

not possible on test

7

WooCommerce? :thinking:

May I ask if those IP addresses are the ones where the WordPress and WooCommerce is installed and hosted, the web server/origin host IP addresses?
Or maybe from the 3rd-party service?

If so, just in case add the IP address of server and/or 3rd-party service into the IP Access Rules with the action “allow” for your Website instead of using Custom WAF Rule:

Can use only path=/confirm/ no need for ? in front here.

8

Thank you, the IP’s are from the third party platform we are using, they are on amazon infrastructure in germany.

I will check all the rules and I will let you know thank you and happy xmas

1 Like
9

Thank you for feedback.

Please us me know if you need any further information and help.
Wishing you a Happy holidays as well! :christmas_tree:

10

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.