How to make legacy Paypal IPNs work with Cloudflare

Mr Lucky

Well-known member
Licensed customer
I have noticed that with Cloudflare active, Paypal (legacy) IPNs are failing. I have tested this by pausing Cloudflare and creating a test recurring payment which works fine when Cloudflare is paused, but IPNs fail again when Cloudflare is active.

The callback has been unchanged for over 5 (or 10) years: https://cafesaxophone.com/payment_callback.php

The solution suggested by various sources is to whitelist so I have created various security rules:

  • User Agent = Paypal
  • AS number = 37244
  • Known bots
  • IP addresses:
    • 173.0.80.0/20
    • 64.4.240.0/21
    • 64.4.248.0/22
    • 66.211.168.0/22
    • 185.177.52.0/22
    • 91.243.72.0/23
    • 198.54.216.0/23
    • 192.160.215.0/24
Screenshot 2026-04-27 at 11.10.10.webp
However when activating the domain with those whitelisted the IPNs fail again

Has anyone got PP legacy IPNs to work with Cloudflare? Any help very gratefully received as it's a bit of a pain if I have to do these manually or ask everyone to resubscribe using Paypal REST API subs.
 
Back
Top Bottom