Conflicts with Wordfence and Cloudflare

  • Resolved Samuel

    (@samuelroguez)


    1 month ago

    I’ve been having problems with Wordfence for quite some time now due to moving to Cloudflare. I’m trying to keep Wordfence, because it has solved many technical problems for me so far.
    The current problem I have is the following:

    • The scanning option keeps loading all the time, and I get a warning that I can’t continue running the scan.

    I’ve checked several things in Cloudflare, including the security option, which I’ve lowered or even disabled.
    Options such as limiting bots or blocking AI are also disabled. I’ve been testing suspicious header inspections, among many other Cloudflare options, over time. But I haven’t found the problem as such. Currently this problem persists, and when I try to scan any of my websites hosted on Cloudflare, Wordfence ends up crashing as soon as it starts, or almost halfway through the scanning process.
    This problem always occurs when it is in the “Server Status and File Changes” scanning process. It never makes it to malware scanning, or public files (which is precisely what worries me quite a bit).

    I’ve been trying to deal with this for a long time, and no matter how much I’ve tried, even adding the Cloudflare Ipv4 and Ipv6 IP list, or lowering the tracking attempt blocking to “unlimited” in all options, it’s still exactly the same.

    Therefore, I’ve decided to ask for help here. Hopefully someone can help me! Hugs community ^^

    • This topic was modified 1 month ago by Samuel.

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Generosus

    (@generosus)

    Hey @samuelroguez,

    At a glance, it appears your issue lies with your Cloudflare account and/or set-up.

    1. Have you submitted a ticket to Cloudflare Support or posted/searched your issue on Cloudflare’s Community Forum?
    2. Make sure your website’s DNS Records have been properly proxied to Cloudflare. (i.e., are orange-clouded)
    3. Make sure your website’s Cloudflare Edge Certificates are active.
    4. Make sure your website’s Cloudflare Origin Certificates have not expired.
    5. Make sure your Wordfence settings are as follows. (a) General Wordfence Options, (b) Advanced Scan Options.
    6. Contact your host and/or check your .htaccess file to make sure they are not blocking (or restricting) Cloudflare.

    Note: Our company also uses both Cloudflare and Wordfence with no issues whatsoever. Within Cloudflare’s settings, we have no special settings or rules established for Wordfence.

    Hopefully, the above will help your solve your issue.

    Best wishes!

    Plugin Support wfmargaret

    (@wfmargaret)

    Hi @samuelroguez,

    Thanks for reaching out. Outside of the suggestions from @generosus, please double-check that your site’s IP is allowlisted in the Cloudflare firewall. You can find our guides for this process here:
    https://www.wordfence.com/help/advanced/compatibility/

    If your host doesn’t support IPv6, please make sure to enable Use only IPv4 to start scans (as mentioned by @generosus in step 5) in Wordfence > Scan > Scan Options and Scheduling > Advanced Scan Options. A site may try to connect to itself using IPv6 when using Cloudflare, which can cause timeouts during Wordfence scans if the host does not support outbound IPv6 connections.

    If your scans are still failing after checking those settings, I’d like to get a debugging log and diagnostics report from you.? If you could do the following steps for me:

    • Go to the Wordfence > Tools > Diagnostics page
    • In the “Debugging Options” section check the circle “Enable debugging mode”?
    • Click to “Save Changes”.
    • CANCEL any current scan and start a NEW scan
    • Click the “Email Activity Log” link once the scan finishes and send that to wftest @ wordfence.com and respond here after you have sent it.

    Wordfence > Tools > Diagnostic > Debugging Screenshot

    This will help me see exactly what is happening when the scan fails.

    Then, can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Let me know if you have any questions!

    Thanks,
    Margaret

Viewing 2 replies - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.