• Resolved zepolo

    (@zepolo)


    Very good plugin but I can’t allow the Firewall to be loaded before any other code loads (optimize the wordfence firewall).

    The Wordfence Web Application Firewall is designed to run via a PHP setting called auto_prepend_file, which ensures it runs before any potentially vulnerable code runs.

    But alternate installation details is not easy. I reead FAQ and help documentation but I can’t complete the setup process.

    Preselected my server configuration based on their tests,is not ok and effective. It’s impossible to achieve.
    An another idea ? thank you

Viewing 15 replies - 1 through 15 (of 19 total)
  • Hi @zepolo,

    In order to make sure which Firewall setup you should be using:

    • Go to the Wordfence Tools page
    • Click the Diagnostics tab
    • In the Other Tests section (near the bottom of the page), click the link that reads “Click to view your system’s configuration in a new window“. This will open a Wordfence System Info page

    Check the Server API field.

    Also please check our Firewall Optimization Troubleshooting guide.

    Thread Starter zepolo

    (@zepolo)

    Hi wfyann,

    I think i theme security (another plugin) prevents firewall configuration. I can’t complete the setup process and optimize the wordfence firewall.

    I use itheme security with wordfence (but not for same firewall optimization).
    Combined with iThemes Security, I make my WordPress website an fortress.
    Both works fine together.

    I can’t process using firewall setup.

    Thank you very much for your answer.

    Hi @zepolo

    We will need more information about this issue in order to proceed with getting the firewall configured on your website, may I know what exactly happens when you go through the configuration steps?

    Also, please go to (Wordfence > Tools => Diagnostics) and click on “Send Report by Email” button at the top of the page, you can send the report to “alaa [at] wordfence [dot] com”, make sure to include your forum username, I will take a look at this report and let you know my findings.

    Thanks.

    Thread Starter zepolo

    (@zepolo)

    Hi
    Thank you for feedback
    I just send the report, but unfortunaly I can’t include my forum username (there is no space or text area)
    Thank you

    Thread Starter zepolo

    (@zepolo)

    Hi

    – what exactly happens when you go through the configuration steps?
    I have this message:

    Installation Successful
    The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.

    Hi @zepolo

    What I’ve received from you is a “Wordfence Activity Report” email, could you please send a diagnostics report email to “alaa [at] wordfence [dot] com” following this guide?

    Thanks.

    Thread Starter zepolo

    (@zepolo)

    Hi
    It’s ok now for our 4 blogs at (Wordfence Activity Report).
    Thank you

    Thread Starter zepolo

    (@zepolo)

    Hi
    We sent a diagnostics report email to “alaa [at] wordfence [dot] com
    Do you have receive it ?
    thanks

    Thread Starter zepolo

    (@zepolo)

    Can’t optimize the wordfence firewall, what a pity.
    thanks anyway

    Hi zepolo,

    We haven’t received your diagnostics report. Please try sending it to asa@wordfence.com. You can see in this image how to provide your forum username:

    View post on imgur.com

    Thread Starter zepolo

    (@zepolo)

    Hi asa,

    Done (diagnostics report for 4 blogs)

    Thread Starter zepolo

    (@zepolo)

    Hi

    Do you received my diagnostics reports ?
    I send them yesterday (asa@wordfence.com) and 4 month ago (alaa@wordfence.com) with my username.

    Hi @zepolo,
    Looks like I got them finally thank you! It says your Server API is FPM/FastCGI and the default configuration for FastCGI should have worked. However, on some sites with PHP FPM we do sometimes see situations where the settings are being overridden. This is from our documentation:

    In rare cases, when a host uses PHP-FPM, they may have PHP settings defined in a “pool” file. These settings can override options set in your custom php.ini or .user.ini file. You may need to ask the host if they have settings in the pool file. The default location for the pool file on new Ubuntu servers is similar to /etc/php/7.0/fpm/pool.d/www.conf (depending on the PHP version) and an example of an option that would override your auto_prepend_file option is php_admin_value[auto_prepend_file] = none. If the host is able to remove this option, it should allow your settings to be used for the firewall.

    So I would at this point recommend that you reach out to your host and ask them this:

    I need to set a PHP value auto_prepend_file on my site but it doesn’t seem to be taking effect. Can you explain how to set auto_prepend_file on my site?

    Hopefully they’ll be able to give you an idea of why it’s not working.

    Hello @wfasa

    I am having the same problem, I have sent my diagnostics report to asa@wordfence.com

    Thank you

    Hello @wfasa

    just wanted to cancel the last post. I`m not very good at computer lingo but… I opened my domain yesterday and till it was on a temporoay domain, the firewall wouldnt optimize. today my site has been mooved to my domain name and I got an Extended protection level on the Wordfence plugin.

    thanks anyway

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘Can’t optimize the wordfence firewall’ is closed to new replies.