iOS/ATV + Cloudflare + Referer header

[C.S. 93]

Until recently I was using a rule in the CF firewall to block requests that have anything in the Referer header. This worked fine because I didn't have any Apple users, but then I tried to add some, and I quickly learned my block rule was catching them.

So the Apple clients go through some intermediate domain (owned by Apple, I assume) before going to my server? Is that correct? Does anyone know the name of that domain, and is the name constant? I'd like to allow it while blocking all others, if possible.

[Luke 42083]

Hi, no, they don't go through any intermediate domain.

[C.S. 93]

That's strange because when I turn on the rule to block requests with anything in the referer header, it's just the Apple clients that get blocked. If I turn off the rule, then the Apples are happy again.

I am no expert but is there something else that could cause this?

 

[Luke 42083]

The webview in the user interface is probably adding a referrer header with a localhost url.

[C.S. 93]

Thanks that was it!