WAF Question

[south trout]

Support AI

According to the documentation, Bot Fight Mode checks are not implemented in the Ruleset Engine, which means that you cannot bypass or skip Bot Fight Mode using the Skip action in WAF custom rules.

As stated in the Cloudflare documentation (https://developers.cloudflare.com/bots/get-started/bot-fight-mode/), "You cannot bypass or skip Bot Fight Mode using the Skip action in WAF custom rules or using Page Rules."

However, you can consider using Super Bot Fight Mode, which can be skipped using the Skip action in WAF custom rules. For more information, you can refer to the Cloudflare documentation on Super Bot Fight Mode (https://developers.cloudflare.com/bots/get-started/super-bot-fight-mode/).

Sources

• Get started with Bot Fight Mode - Cloudflare bot solutions docs
• WAF Skip Rule is Ignored & Persistent JS Challenge
• Get started with Super Bot Fight Mode - Cloudflare bot solutions docs

Feedback

Feedback has been submitted! Thank you :)

This is an AI generated response, it may not be 100% accurate. Please validate the output. You can ask followups by replying to this message or mentioning me.

[umbral agate]

?skip-bfm

[south trout]

Bot Fight Mode cannot be skipped by WAF Rules or other "Bypass" actions.
Bot Fight Mode is a very aggressive solution that should only be enabled if you are actively under attack.

Remedies:

• Upgrade to a Paid plan and use Super Bot Fight Mode
• Disable Bot Fight Mode