Firewall Error

Hi @svenkilcher, I’m not particularly familiar with plesk, but is there a way in the firewall configuration to allow certain URLs through? Are you also able to tell me what web server you’re using (ie, apache, nginx, etc.)?

We have Apache with nginx.
Nginx as the frontend server.
Can I disable rules here?
Disable security rules
“You can disable security rules here. This is useful if you find that a security rule is too restrictive for some websites. To disable security rules, specify their IDs (e.g. 340003 or 340005-340007), tags (e.g. CVE-2011-4898) or regular expressions that are used in rule messages (e.g. XSS).”

Again, I’m not familiar with plesk, but that doesn’t look like it. Are you able to modify your nginx config or is that something you’d have to ask your hosting provider about?

That, I believe, is where the problem lies, as Matomo for WordPress automatically creates .htaccess files for use with apache that allow access to those folders.

@svenkilcher do you still need help with this? If so, can you let me know what hosting provider you’re using (I’ll try to reproduce the problem and find a solution).

Hello @dizzyatinnocraft
Hosteurope support sent me this link:
https://talk.plesk.com/threads/extension-modsecurity-issues-with-matomo.350511/
But nothing helps.

@svenkilcher for our core product it seems we have a guide that recommends disabling the firewall: https://matomo.org/faq/how-to-install/how-do-i-install-matomo-with-plesk/#disable-web-application-firewall-modsecurity

I will try to find out if it’s possible to just disable some of the rules in the firewall in case you want to keep it enabled. Also I think the security rules section you mentioned above is where it would need to be done.

Hello @dizzyatinnocraft
We have disabled the modsecurity firewall in Plesk.
We still have the problem that when we switch to preview mode in Tag Manger, we are blocked after a short time.
Firewall is no longer installed.

@svenkilcher, can you explain what you mean by blocked?

Hi @svenkilcher, are you still encountering the tag manager issue? If you can tell me what you mean by “blocked” I might be able to help.

A quick update on hosteurope: the process to purchase an account there seems very involved (at least for me), and we haven’t been able to get an account to test with yet.

Due to a lack of response, I’ll mark this as resolved. However, if you still need help or need help with something else, feel free to comment further.