Whitelist the CDN servers, if there is access control list (ACL) on the origin