scheduled entries are lost, cron

Hi @ciudadnoticias

Do you use crontab to schedule a task? If yes cross check in command prompt running that command due to AIOS firewall is it throwing 403 forbidden error or any thing else.

If it is WordPress corn which runs when WordPress page loads in that case You can use WP Control plugin and run that cronjob event to check which error it doe have.

Do hosting provider said any error logged during that run what stops publishing post ?

Hello, thanks for answering.
WordPress cron is used to execute the task, we have already verified WP Control and when the task is not executed it remains “queued” if we let it run manually the task runs without problems.
Regarding the hosting provider, it says that there is no error, they say that the cron task is executed correctly, although now what it tells me about the 403 error yesterday in one of the messages they answer me this:

“While I review the Apache domlogs, I can see the next entry.

75.102.58.87 – – [2023/Oct/26:15:35:50 +0200] “POST /wp-cron.php?doing_wp_cron=1698327350.4555270671844482421875 HTTP/1.1” 403 0 “-” “WordPress/6.3.2; https : //citynews.es”
This log entry indicates that a POST request was made to “php/wp-cron.URL”, which was denied access by the server with a “403 Forbidden” status code.

Temporarily disabled ModSecurity for the website ‘ciudadnoticias.es’.
Please try again now.”

I tried it later but it didn’t work either, I don’t know if this can give more clues

Hi @ciudadnoticias

can you please cross-check define below constant in wp-config.php file before wp-settings.php file get added ? It will disabled firewall rules so if any firewall rule is making issue It will be solved.

define( 'AIOS_NO_FIREWALL', true);

If still issue try disable one by one below

1) WP Security > Miscellaneous > WP REST API Can you please cross check the Disallow unauthorized REST requests:
2) Deny bad query string – WP Security > Firewall > Addition firewall rules tab. Deny bad query strings:
3) Advanced char filter – WP Security > Firewall > Addition firewall rules tab. Enable advanced character string filter :
4) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection
5) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules

Dear @hjogiupdraftplus
I put the line that you indicated in my wp-config.php and the cron works again, the entries are published, now my question is, if I leave that line in the wp-config the firewall would be disabled, right? So that solution wouldn’t work, would it?

Hi @ciudadnoticias

Yes, That line in wp-config.php means the AIOS firewall does not work.

It needs to identify which firewall rule is causing the issue. Can you please try disable one by one below rule. Also IF you provide more details of the POST content etc, can guess which firewall settings from WP Security > Firewall menu is causing issue. Please cross check the your own IP not blocked at WP Security > Blacklist manager.

1) Deny bad query string – WP Security > Firewall > Addition firewall rules tab. Deny bad query strings:
2) Advanced char filter – WP Security > Firewall > Addition firewall rules tab. Enable advanced character string filter :
3) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection
4) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules

Hello @hjogiupdraftplus
After having deleted the line in wp-config.php and having applied the 4 steps that you recommended in the previous message, I have the cron problem again, the scheduled posts are not published again.
I went to check the blacklist and there was an IP, which does not correspond to mine but I deleted it and now the cron is running, it seems that that blocked IP was the problem.
I think we can consider it solved, thank you very much for all the help provided.

Hi @ciudadnoticias

Glad to know the issue is fixed, You should cross-check what that IP is ( hope not the same server’s private IP) and why it is blocked otherwise, it can be an issue in the future.

Would you mind writing a quick five-star review on www.ads-software.com?

https://www.ads-software.com/support/plugin/all-in-one-wp-security-and-firewall/reviews/#new-post

Reviews also help others to make confident decisions about our plugin.

• This reply was modified 1 year ago by hjogiupdraftplus.

I imagine that it is the private IP of the server, why it was blocked, I don’t know, but I will monitor it very closely.
Of course count on that review and again thank you very much

Hi,

Ok, If still any issue please create another topic. I am marking this as resolved.

Regards