Hi @nhaider634,
Wordfence does not block plugin updates or installation as part of its feature set, but this certainly looks like general communication to locations outside of your site has become blocked.
If this immediately subsides when Wordfence is disabled, it looks like you’ll need to check the Cloudflare-specific settings in Wordfence. Firstly, find your public facing IP address at: https://www.whatsmyip.org/
Look at Wordfence > Dashboard > Global Options > General Wordfence Options > How does Wordfence get IPs and cycle through the options there until it displays your IP address. You will most likely need to select “Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.”. That will be the setting you need to use going forward, so click the SAVE button once you’re done.
There’s some further information around this here: https://www.wordfence.com/help/dashboard/options/#general-wordfence-options
Once the site is able to connect back to itself, you may also need to update your Cloudflare settings to allow your site to connect back to itself. You should be able to do this by going to your Cloudflare control panel.
- Login to Cloudflare
- Go to “Firewall”
- Click the “Firewall Rules” tab
- Click “Create a Firewall rule”
- Name the rule under “Rule Name”
- Set the “Field” under “When incoming requests match…” to “IP Address”
- Enter your site’s IP address under “Value”
- At the bottom, under “Then…Choose an action” change “Block” to “Allow”
- Click “Deploy
Once you have added your site to the Cloudflare Whitelist, head back over to your site and attempt some of the actions that were failing again.
Let me know how you get on!
Peter.
