#Mollie webhook with cloudflare issues (403 forbidden)

1 messages · Page 1 of 1 (latest)

proper geyser
#

We have a Mollie webhook that connects to our server and forwards data to Moneybird. Between Mollie and our site, we use Cloudflare. Everything worked fine until September, but starting in October, we’ve been getting 403 Forbidden errors. Does anyone know which settings I need to configure in Cloudflare? I’ve already tried everything with whitelisting, but the issue persists.

void ermine
#

Hi! Do you say you have a whitelist for the webhook endpoint?

In that case I want to advice to remove it. We do not recommend to whitelist our IP addresses for that use case.

proper geyser
#

no, just the webhook adres we made a whitelist in cloudflare. but didnt help 😉 there is something in cloudlfare that blocks the webhook traffic.. strange thing is, it worked until october.

#

there is something that cloudflare blocks from you guys..

#

there must be more customers with this problem (i think).

#

we dont have a special rule set.

void ermine
#

I am not aware about anything. Have you tried to reach out to Cloudflare support?

proper geyser
#

not yet 😉 i will.. mollie gave me this support channel.. so gave it a try haha

void ermine
#

Haha. Its a good first step ;p

#

But as far as I know, we havent changed anything and Im not aware of open incident regarding people making a case for this.

#

😦

proper geyser
#

oke.. good to know.. tnx

#

good to have you here.. someone who respond fast haha

void ermine
#

We try our best haha.

#

Please let me know when Cloudflare has something to say! I will do the same when I hear something from out side! 🚀

proper geyser
#

could you fire off our webhook again? then we could try some things? and try again..

#

what would be helpfull also

void ermine
#

I can if you want

proper geyser
#

could we dm?

void ermine
#

Unfortunatly not. We maintain this Discord besides our own jobs 😄
With public threads, others can jump in when someone is busy.

We only ask sometimes for identifiers via DM

proper geyser
#

ah i understand. but i dont whatn to show my website info in public 😉

#

or is this a call only for you guys?

void ermine
#

I understand! If you want me to trigger a certrain webhook of a payment, just DM me the Payment ID (starting with tr_) and I will make it work!

#

No, everyone can see us. (Hello! 👋 )

proper geyser
#

haha. what i thought.

#

you have to be my friend before i could send something to you 🙂

#

(security)

proper geyser
#

with this settings, it worked:

proper geyser
#

other ones arent needed. these checkboxes are enough