[Juan]

In case it helps anyone use this as a custom security rule in Cloudflare:

(ip.src in {
54.236.233.46
54.236.233.28
54.174.91.34
54.174.153.212
54.174.115.171
35.157.245.195
18.185.35.20
52.56.56.141
35.178.158.59
52.47.143.35
52.47.91.37
})

Then select Choose Action > Skip

And you can pretty much go nuclear and have it skip all WAF stuff:

– All remaining custom rules
– All rate limiting rules
– All managed rules
– All Super Bot Fight Mode Rules
– Zone Lockdown
– User Agent Blocking
– Browser Integrity Check
– Hotlink Protection
– Security Level
– Rate limiting rules (Previous version)
– Managed rules (Previous version)

Ref: https://www.sectigo.com/knowledge-base/detail/Whitelisting-CodeGuard-s-IP-Addresses

[Sharon]

Note that Cloudflare discourages using IP rules now, even the WAF menu link is now gone, they are pushing everyone to use the new Security Rules instead.

[Olivia]

going nuclear is always the preferred route in SecOps

[Julia]

Hoo-ray!!

[Author]

Posts