'Exclude page from Cloudflare defence

I want to exclude the callback page from Cloudflare anti DDOS protection so I can accept callbacks from the payment systems when I enable "under attack" mode, but looks like it doesn't work. I have the following rule:

domain.com/callback*
Always Online: On

I checked with the curl and it returns the standard html+javascript captcha page.



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source