• Resolved abookwanderer

    (@abookwanderer)


    Hello, a few months ago my website was the target of a redirect hack–twice. Which prompted me to find a new host and firewall. But every firewall I’ve tried has been blocking legitimate comments along with all spam comments. I finally landed on All in One and found the least amount of blocking but I’ve been informed from a few commenters (through twitter and instagram) that their comments are still not going through.

    I read through the forums here and found changing the IP Retrieval Setting helped the most, and each time someone let me know their comment hadn’t gone through, I changed to the next setting choice. I had it on HTTP_X_Forwarded_For, when I was contacted again. I have no idea which setting I should be using or if I have another setting wrong. I can’t seem to find a thorough explanation for each of the settings. Unfortunately, I have no way to test the problem, and I’m at the mercy of fellow commenters.

    Any help or advice would be greatly appreciated!

    The page I need help with: [log in to see the link]

Viewing 15 replies - 1 through 15 (of 15 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, please check the following forum post. Let me know if this helps you in any way.
    https://www.ads-software.com/support/topic/wp-aid-security-blocking-comments/

    Thank you

    Thread Starter abookwanderer

    (@abookwanderer)

    Thank you for the response! I did come across that, but I don’t understand coding so it wasn’t much help. I understand what the instructions are but I don’t know how to implement them.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, is your site using Cloudflare? What type of server is your site hosted in?

    Thank you

    Thread Starter abookwanderer

    (@abookwanderer)

    No, not using Cloudflare. It’s Apache through Bluehost.

    Thread Starter abookwanderer

    (@abookwanderer)

    Well, after researching it it appears Cloudflare is automatically included on Bluehost now. So I guess I am using it. So I would need to go into the code and disable forbid comment proxy? Is that right?

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    Well, after researching it it appears Cloudflare is automatically included on Bluehost now. So I guess I am using it. So I would need to go into the code and disable forbid comment proxy? Is that right?

    Yes, that is probably your best option.

    Thank you

    Thread Starter abookwanderer

    (@abookwanderer)

    I reviewed the htaccess file and didn’t see that particular string of code regarding Forbid Comment Proxy. Would you be able to point me in the right direction?

    Thank you!

    Thread Starter abookwanderer

    (@abookwanderer)

    When I check the box to “forbid proxy comment posting” under the “additional firewall rules tab” that string of code appears, but I originally didn’t have that checked so I would assume that means forbid proxy comment posting was already disabled? I can’t find it anywhere else. Any other ideas why comments would be getting blocked?

    I appreciate any help or advice!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    but I originally didn’t have that checked so I would assume that means forbid proxy comment posting was already disabled?

    Yes that is correct.

    I can’t find it anywhere else. Any other ideas why comments would be getting blocked?

    Is this happening while this feature was turned off or on?

    Regards

    Thread Starter abookwanderer

    (@abookwanderer)

    It’s been off. I never had that option selected.

    As I said in my original comment, changing the ip retrieval selection has helped allow some comments, but it appears others are still getting blocked.

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    This might be challenging to work out because it only happens to some of your visitors and not to all of them.

    It might be related to a conflict with one of your other plugins or your theme. Carry out a plugin/theme conflict test.

    You could also check the log files.

    The following plugin might also help.

    https://www.ads-software.com/plugins/health-check/

    Let me know how you go.

    Thank you

    Thread Starter abookwanderer

    (@abookwanderer)

    Thank you for trying to help!

    I actually already have that plug-in installed and it shows everything to be good. I’ve been trying to figure out this problem for months, but like you said it’s challenging when some comments go through and others don’t. I just have to wait until someone lets me know that they weren’t able to comment, which makes testing different plug-ins a challenge.

    I do know I used to receive numerous spam comments every day but now I receive none. I would rather receive all comments and just manually approve them then have them blocked.

    I’ll keep working on it.

    Thanks!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    There is another option you could try. Go to WP Security -> Settings -> Advanced Settings what option have you selected?

    If you are running a CDN service like Cloudflare then select HTTP_CF_CONNECTING_IP.

    Let me know if the above helps.

    Regards

    Thread Starter abookwanderer

    (@abookwanderer)

    Hi,

    I chatted with Bluehost and they said Cloudflare is not enabled on my website. I was really hoping that was it. But I currently have it set on HTTP_X_Forwarded_For. I have no idea if that’s the one I should be using?

    Bluehost did suggest a few selections to change on my WordPress settings so I’m hoping maybe that will help, too.

    Thanks for responding!

    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    But I currently have it set on HTTP_X_Forwarded_For. I have no idea if that’s the one I should be using?

    You might like to try one of the other options if you still have an issue.

    Thank you

Viewing 15 replies - 1 through 15 (of 15 total)
  • The topic ‘Legitimate comments being blocked’ is closed to new replies.