Recent content by Waterfall

We're now getting harassed by Chrome/151 user agents, I've had to set them on a temporary block since these bots seem to avoid the challenges. It's not that old but a few months old is already enough for me to be uncertain altogether. Ugh.

Yeah I’ve had Occulus on my challenge list for a while, but it’s only recently that One Cable has started being so aggressive. I had them on block but just moved over to challenge and will see how it goes 😬

Massive uptick in US-based spam traffic in the last few days, particularly from ASN 401560. They've really been hammering away. Geez.

How would one go about resolving this? I've ran all the cron entries (including of course the ones relevant to these) and no go.

Tried before same issue, none of them work when it comes to the image-related problems I mentioned :(

Yeah it's very close to the top above everything else except the search indexing rule, and I've been testing with my VPN. Thank you! Sadly I get this error trying this instead of what I've already tested: 'http.request.cookies["xf_user"] contains "xf_user"' is not a valid value for expression...

Does anyone know how to skip all CF actions for logged in users - not just CF challenges, but also allowing on-site images to load properly? I've got a skip rule for the and any(http.request.cookies["xf_user"] ne "") cookie which should be skipping all custom rules currently implemented for...

I'd like to ask for some help please - in my efforts to combat high spam from a bunch of countries that is massively affecting our ad revenue, I'm trying to make it so countries outside of a select few get a CF managed challenge, with the exception that logged in users do not get these...

Curious if anyone has had an excessive amount of US spam traffic as of late, by the way? I notice it's been hitting my XF forum a lot. My developer linked this article to me earlier today...

Unfortunately same. :(

Gone ahead and done this as well. We had a rate limit that blocked anyone failing 5 or more password attempts for an hour, but that's definitely not enough on its own. Thanks all!

Hi folks. Does anyone have an excessive amount of visitors to the Log in page? The "Log in" path is always my top path on Google Analytics nowadays, and I'm struggling to find any pattern via Cloudflare. Is there a way to add a challenge to XF's log in page without causing issues? Whenever I do...

Hi Naz - this is an amazing addon, thank you! I've followed all the steps to connect Discord to my forum, and all statuses are now green as they should be. However, users cannot connect their Discord accounts to their forum accounts since we get an "Invalid OAuth2 redirect_uri" error. Do you...

Yeah for WAF I'm able to include them, but rate limiting rules still don't allow it :(

Implemented this, thank you! Now if only I could exclude logged in users based on cookie for my rate limiting rule, but that's Enterprise plan only.. 🥲