i'm observing some wierdness .. as some mail providers are not reporting by book (adding forward envelope) .. is it counted in ..

A records are just served, it’s just DNS data to send along. I think what you want is the load balancing feature

If the two A Records are proxied and you have Pro or higher, CF will do this for you via Zero-Downtime failover

If you have another A or AAAA record in your Cloudflare DNS or your Cloudflare Load Balancer provides another origin in the same pool, Zero-Downtime Failover automatically retries requests to your origin even before a Load Balancing decision is made.

Otherwise like Karew said, you want load balancer. You can do Load Balancer DNS-only or proxied

Yea but its expensive x3

Okay Problem is we are already over our budget Limit and cant pay more Money every Month

Why? They are winding CF servers anyways. It doesn't reach your server

Also i doubt it's possible because the system resolves the domain to an IP and the cf server has no idea who you're pinging

oh wow, I actually got refunded

and support said they found the bug

I have a weird situation with CF Zero Trust. Logging in and out worked great with Google as iDP, but then when I switched to Google Workspace it seems impossible to log out. Both with

<domain>/cdn-cgi/access/logout

and

https://<teamname>.cloudflareaccess.com/cdn-cgi/access/logout

, I get to the success page. But, if I go back to the site, I am still logged in. Perhaps related to this, the cookie token received also does not seem to be the one associated with the Google Workspace iDP since I don't receive the groups I am in. What can be wrong here?

now I hmm, I just fat typed the Warp Client setup and put an entire email address in instead of "users ending in domain.com"

and now I can see in the logs...

that I created a policy, but I cannot see where to delete it?

You're talking about a Device enrollment policy? You can just go to Settings -> Warp Client -> Device Enrollment Permissions and delete the policy or change it after

When I try to make a firewall rule with the action "log", I get an error "not entitled to use the log action". Is logging an event now enterprise only or something? 🤔

Log with firewall rules was always Enterprise only as far as I know, now with Custom Rules it does show you it even though you can't use it though

I used to use it on a free plan!

Maybe it helps to explain, the other action types like Block/etc still do appear in logs, as well as doing that action. As far as I can see, it's always been documented as Enterprise only as well, so idk. If you do want to "log" with a new Custom Rules, on free plan you could make a Skip Action that skips something you're not using (like sbfm, old rate limiting ru les, etc) with Log matching requests enabled, and that would also do nothing and just log requests

ok, sounds like the same result. ty.

but I definitely have been able to set rules to "log" previously 🤷🏻‍♂️

I am noticing that too and it says the rua tag is missing now 🤷‍♂️

At least couple of examples are by Yahoo sending forwarded email report to us as originator

I am not getting anything on any domain. Set up on Tuesday

:/ in my case it took less than 24h

I don’t know what I should do

You have std email configures to catch reports?

And feed comes in

Yeah

But reset records now just see the above message

Anyone any idea what is going on