I have noticed that with Cloudflare active, Paypal (legacy) IPNs are failing. I have tested this by pausing Cloudflare and creating a test recurring payment which works fine when Cloudflare is paused, but IPNs fail again when Cloudflare is active.
The callback has been unchanged for over 5 (or 10) years:
The solution suggested by various sources is to whitelist so I have created various security rules:

However when activating the domain with those whitelisted the IPNs fail again
Has anyone got PP legacy IPNs to work with Cloudflare? Any help very gratefully received as it's a bit of a pain if I have to do these manually or ask everyone to resubscribe using Paypal REST API subs.
The callback has been unchanged for over 5 (or 10) years:
https://cafesaxophone.com/payment_callback.phpThe solution suggested by various sources is to whitelist so I have created various security rules:
- User Agent = Paypal
- AS number = 37244
- Known bots
- IP addresses:
- 173.0.80.0/20
- 64.4.240.0/21
- 64.4.248.0/22
- 66.211.168.0/22
- 185.177.52.0/22
- 91.243.72.0/23
- 198.54.216.0/23
- 192.160.215.0/24

However when activating the domain with those whitelisted the IPNs fail again
Has anyone got PP legacy IPNs to work with Cloudflare? Any help very gratefully received as it's a bit of a pain if I have to do these manually or ask everyone to resubscribe using Paypal REST API subs.