Comment by vimwizard

seems related to CF tunnels... policies are being enforced but perhaps origin servers are not being properly served.