• Resolved MisterH

    (@hmarksthespot)


    Hi, We are having some issues with this plugin, and seems a few other people online have encountered this issue. It is blocking all comments made to the website causing a 403 error.

    Disabling All in one WP Security plugin -> firewall -> Forbid Proxy Comment Posting

    Makes the 403 error go away but but causes an issue where the comment is still not posted and I get another error.

    Unable to connect can’t establish a connection to the server at 127.0.0.1.

    Can the author kindly post a solution or be able to have a look? Thanks

    • This topic was modified 3 years, 7 months ago by MisterH.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi,

    The following feature Forbid Proxy Comment Posting adds the code illustrated below.

    # BEGIN All In One WP Security
    #AIOWPS_FORBID_PROXY_COMMENTS_START
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} ^POST
    RewriteCond %{HTTP:VIA} !^$ [OR]
    RewriteCond %{HTTP:FORWARDED} !^$ [OR]
    RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
    RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
    RewriteCond %{HTTP:X_FORWARDED_HOST} !^$ [OR]
    RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
    RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
    RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
    RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$
    RewriteRule wp-comments-post\.php - [F]
    </IfModule>
    #AIOWPS_FORBID_PROXY_COMMENTS_END
    # END All In One WP Security

    You have to investigate what part of the code above is causing the conflict in your site. Once you work it out, go to the following tab Custom Rules.

    This feature can be used to apply your own custom .htaccess rules and directives. It is useful for when you want to tweak our existing firewall rules or when you want to add your own.

    NOTE: This feature can only be used if your site is hosted in an apache or similar web server.

    Let me know if the above helps you.

    Thank you

    Hi, @hmarksthespot

    I had the same problem. It was caused by cloudflare.
    If you you use cloudflare or other CDNs, you must disable forbid comment proxy posting, and there is no other way, cause these CDNs are like a proxy.

    Hope it helps ??

    Thread Starter MisterH

    (@hmarksthespot)

    Hi Longman, Thanks, ?? I did try this following your comment but now i get a 127.0.0.1 ERR_CONNECTION_REFUSED.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WP AIO Security – Blocking Comments’ is closed to new replies.