Getting REFUSED response code from Cloudflare

[GlebTyazhyolov]

Hi,

I created CLOUDFLARE_DNS_API_TOKEN and CLOUDFLARE_ZONE_API_TOKEN. Tested both tokens in curl and Postman, successfully got zones listing, and was able to create TXT record, exactly the same on which I getting REFUSED return code in LEGO.

I found nothing in Google in re to this response code, so writing here in the hope that you may have some ideas.

The LEGO output is below (I replaced my corp domains to contoso.com):

CLOUDFLARE_DNS_API_TOKEN=<cut> CLOUDFLARE_ZONE_API_TOKEN=<cut> lego --email [email protected] --dns cloudflare --domains test123asds1.contoso.com run
2021/10/28 17:59:10 [INFO] [test123asds1.contoso.com] acme: Obtaining bundled SAN certificate
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/<cut>
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] acme: Could not find solver for: tls-alpn-01
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] acme: Could not find solver for: http-01
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] acme: use dns-01 solver
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] acme: Preparing to solve DNS-01
2021/10/28 17:59:11 [INFO] [test123asds1.contoso.com] acme: Cleaning DNS-01 challenge
2021/10/28 17:59:11 [WARN] [test123asds1.contoso.com] acme: cleaning up failed: cloudflare: unexpected response code 'REFUSED' for _acme-challenge.test123asds1.contoso.com. 
2021/10/28 17:59:12 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/<cut>
2021/10/28 17:59:12 Could not obtain certificates:
        error: one or more domains had a problem:
[test123asds1.contoso.com] [test123asds1.contoso.com] acme: error presenting token: cloudflare: unexpected response code 'REFUSED' for _acme-challenge.test123asds1.contoso.com.

The Lego version is the most recent, compiled from source code today: 60ae6e6 linux/amd64

[GlebTyazhyolov]

Today I got a certificate by the LEGO tool. Tried to do the same from my terraform code, where I using Acme provider which internally using Lego code.
And I got 2 certificates for domain Y without any issues
And got the same REFUSED error for domain Z

Weird. Same code and actions causing non-deterministic results.

[GlebTyazhyolov]

Sorted out.
It was an issue related to my home router. My apologize.
I'll not delete my messages in case if somebody will met the same issue for the same reason =)