Access denied 1020

Reference guide

Do you know which Cloudflare firewall/WAF rule blocked this, or is it unclear?

I can see which rule blocked it

Request path

  1. You (reached)
  2. DNS (reached)
  3. Cloudflare edge (answered with a warning)
  4. Origin (not reached)

blocked

A Cloudflare firewall/WAF rule you've identified is intentionally blocking this request.

What to do

  1. Check. Open that specific rule in Security > WAF and confirm it's matching more broadly than intended (e.g. blocking legitimate traffic alongside the traffic it was meant to stop).
  2. Fix. Narrow the rule's match conditions, or add an explicit allow rule (with higher priority) for the legitimate traffic.
  3. Verify. Retry the request and confirm it's no longer blocked, then confirm the rule still blocks the traffic it was meant to.

Unclear / can't tell

Request path

  1. You (reached)
  2. DNS (reached)
  3. Cloudflare edge (answered with a warning)
  4. Origin (not reached)

blocked

Some Cloudflare firewall/WAF rule is blocking this request, but which one isn't clear yet.

What to do

  1. Check. Go to Security > Events in the Cloudflare dashboard and filter by this request's timestamp/IP to see which rule fired and why.
  2. Fix. Once identified, narrow that rule's match conditions or add an allow rule for the legitimate traffic (same fix as above).
  3. Verify. Retry the request and confirm it's no longer blocked.

Want to narrow it down interactively instead? Use the error lookup tool.