Problem using WordFence + WooMultiStore

  • Resolved Freerk

    (@webzakenadvies)


    2 years, 1 month ago

    Since a couple of weeks I have a problem using 3 sites with WordFence + WooMultiStore. The stockchanges should be synchronized between the 2 child sites and the main site, but this does not work.

    WooMultiStore told me the following about this:
    “Stock Sync/Product sync uses API requests. Wordfence/security plugins can sometimes identify that as a bot and block. Please whitelist all your site’s IP adresses. I investigated the WordFence problem further. It is the WordFence on the child site that can block the product update. When the WordFence Firewall is set in learning mode, it will automatically create some exception rules for admin-ajax.php. After installing WordFence (the first time) it will automatically be in learning mode for one week, so then it should work.”

    Setting WordFence into learning mode again does not help. Deactivating WordFence on the child site seem to solve the problem with WooMultiStore. There are some exception rules defined on the following URL’s:
    /admin-ajax.php
    /wp-admin/admin-ajax.php

    How can I stay using WordFence safely and get the interaction between the websites with WooMultiStore working? Any suggestions?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @webzakenadvies, thanks for getting in touch.

    Before we consider fully allowlisting the child site IPs on the main site, which isn’t necessarily ideal as it allows those to bypass Wordfence protection altogether, we could check if a specific firewall rule is in play.

    If you’re able to trigger a stock difference that should update across all sites, I would expect the blocks and the reason for them to then show in your Live Traffic feed. You could try checking this immediately after seeing the mesage in your screenshot, just to see whether you’re able to click on the Live Traffic entry to expand it, and select the “ADD PARAM TO FIREWALL ALLOWLIST” button. If you don’t see a button, or this doesn’t work, you could paste the block reason to me here to assist in diagnosing what steps we may need to take next.

    Thanks,
    Peter.

    Thread Starter Freerk

    (@webzakenadvies)

    I first tried to allowlist the IPs of the connecting sites, this should at least solve the problem I think. But it does not!

    What else can I do/check to be absolutely sure that WordFence does not block the interaction? Or is un-installing the only way?

    Plugin Support wfpeter

    (@wfpeter)

    Hi @webzakenadvies,

    If you’re unable to find any record in your Live Traffic of instances where the IPs were blocked, and allowlisting them had the same result, it’s unlikely that Wordfence is blocking them – as forcing Wordfence to allow them didn’t positively affect the outcome.

    I’d make sure that there are no firewalls, proxies or load balancers active on your site perhaps blocking the IPs at an earlier stage. It could be worth asking your host if they’re able to ping the IPs just in case they’re blocked at a higher level.

    Thanks,
    Peter.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Problem using WordFence + WooMultiStore’ is closed to new replies.