WAF rules messing up sharing links


I recently activated some WAF rules on my website www.aviationupdatesph.com to eliminate invalid traffic requests as much as possible.

In my rulesets, I deployed JS Challenges to certain countries where I gain unusually high amount of traffic.

However, when I share a link to social media, it shows no thumbnail and no meta tags on title and description. The link preview title is “Just a moment…”, which I think is the JS Challenge. Using FB Sharing Debugger, shows a 503 response code – “URL returned a bad HTTP response code.”

I tried to disable the firewall rules and it worked fine now.

Now, I would like to ask help on how to not destroy the preview links but at the same time deploy my WAF rules to certain countries?


Setting a threat score in the rule expression solved it. :slight_smile: