There was an additional flag added in the latest patch that is required to avoid filtering external requests.