Sitemap 403 error issue

[1xgamble]

Answer these questions to help the Community help you with Security questions.

What is the domain name?
ventiapple

Have you searched for an answer?
yes, but I couldn’t

Describe the issue you are having:
After setting up all the WAFs, event didn’t check the problem, but the 403 error still persists.

What error message or number are you receiving?
403

What steps have you taken to resolve the issue?

1. WAF
2. SSL : full
3. Page Rules
   
   

Was the site working with SSL prior to adding it to Cloudflare?
yes

Have you tried from another browser and/or incognito mode?
yes

Please attach a screenshot of the error:

[Wanda]

Hello!

You can expand the Activity log (the > on the left) and see which rule is blocking that traffic.

See how: Security Events — Free plan · Cloudflare Web Application Firewall (WAF) docs

Once the rule is identified, you can either disable the rule or allowlist the IP.

There are a few ways:

Available skip options · Cloudflare Web Application Firewall (WAF) docs

IP Access rules · Cloudflare Web Application Firewall (WAF) docs

The best method depends on what is blocking the traffic.

[1xgamble]

Thank you for the your reply.

I have setup as below. But the 403 persists. Is there anything additional to set?

and

1. SSL : full
2. Page Rules

[1xgamble]

eveng log

[1xgamble]

A 403 error occurred, so I set all the settings below, and it is confirmed as “Skip” in the event history, but my sitemap is still not confirmed. please can someone help me?

Security → WAF
Custom rules

1. URI Path → contains → “sitemap” and “Known Bots” → skip
   WAF components to skip (check all)
2. User Agent → contains → Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) → skip(check all)
3. User Agent → contains → Value → Googlebot → skip skip(check all)

IP Access Rules

1. 66.249.73.131 → All websites in account → Allow
2. 66.249.73.132 → All websites in account → Allow
3. 66.249.75.71 → All websites in account → Allow

Security → Settings

1. Security Level → Medium (Essentially Off also tried, but to no avail.)
2. Browser Integrity Check → off

Page Rules

1. *.OOOOO.com/sitemap.xml → Cache Level: Bypass
2. *.OOOOO.com/sitemap_index.xml → Cache Level: Bypass

Cache Rules
URI Path → contains → sitemap → Bypass cache

[1xgamble]

Pausing cloudflare makes the 403 go away. It seems to be a configuration issue with cloudflare. The hosting company said it was a clareflare configuration problem.