snake Posted Tuesday at 04:38 PM Share Posted Tuesday at 04:38 PM I have been using CloudFlare for years, but some months ago, the gocardless callbacks stopped working, and payments were not recorded. the only solution was to disable cloudflare proxy for whmcs. Does anyone know how to resolve this? how can I whitelist the WHMCS API or exclude the callback URL from the proxy. Cannot seem to find any option to do this. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Technical Analyst WHMCS PeterM Posted Wednesday at 01:06 PM WHMCS Technical Analyst Share Posted Wednesday at 01:06 PM I believe you should be able to add a WAF rule in Cloudflare to skip the security features for the callback URL (https://yourdomain.com/whmcs/modules/gateways/callback/gocardless.php). https://developers.cloudflare.com/waf/custom-rules/skip/ If the URL is then still getting blocked by Cloudflare, you may need to open a ticket with Cloudflare so they can advise further. 0 Quote Link to comment Share on other sites More sharing options...
snake Posted Wednesday at 01:52 PM Author Share Posted Wednesday at 01:52 PM this is what I believed too, but when creating a custom rule, these are the only skip options available. All remaining custom rules All rate limiting rules All managed rules All Super Bot Fight Mode Rules Zone Lockdown User Agent Blocking Browser Integrity Check Hotlink Protection Security Level Rate limiting rules (Previous version) Managed rules (Previous version) 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Technical Analyst WHMCS PeterM Posted Wednesday at 02:08 PM WHMCS Technical Analyst Share Posted Wednesday at 02:08 PM Have you created a rule that skips all of those for the callback URL? If some requests to the callback URL are still being blocked when all those are skipped, perhaps contact Cloudflare for clarification on how to ensure they are not blocked in future. 0 Quote Link to comment Share on other sites More sharing options...
snake Posted Thursday at 01:40 PM Author Share Posted Thursday at 01:40 PM no I didn't, as none of those options seem relevant. I guess I can try 0 Quote Link to comment Share on other sites More sharing options...
Jackson12 Posted yesterday at 08:07 AM Share Posted yesterday at 08:07 AM On 4/29/2025 at 10:08 PM, snake said: I have been using CloudFlare for years, but some months ago, the gocardless callbacks stopped working, and payments were not recorded. the only solution was to disable cloudflare proxy for whmcs. Does anyone know how to resolve this? how can I whitelist the WHMCS API or exclude the callback URL from the proxy. Cannot seem to find any option to do this. As you have confusion regarding, what option you have to block to resolve this issue, so I think, you should contact with Cloudflare support team. Thanks 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.