• Resolved irongenetics96

    (@irongenetics96)


    Hello i have Wordfenced installed on 5 domains. On each installation i see under firewall whitelisted urls like /wp-admin/options-general.php and i can′t remember that i put the urls in there.

    So my question is: Should i delete the whitelisted urls for security reasons or let them in?

    There are 3 possibilities:

    1. Leave it as it is
    2. Delete Firewall and whitelisted urls, install firewall again
    3. Delete Whitelisted Urls and turn on learning mode again

    So what should i do?

    I also found some files in Exclude files from scan that match these wildcard patterns which i didn′t put in myself. Can i delete those, so they get scanned again?

    Thank you very much for your help…

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter irongenetics96

    (@irongenetics96)

    ? ??

    Hi @irongenetics96,

    The whitelisted URLs would have been added while your Wordfence Firewall was in Learning Mode. They would have been added automatically. If they don’t look familiar to you, you can remove them. The only downside might be if any of them are actually whitelisting actions on forms or actions related to your theme. If so, you might get unwanted blocks after removing them.

    For the scan “exclude files” those have also been added automatically. When the Wordfence scan fails on a specific file it will add it to the exclude files list to prevent the scan from dying while scanning the same file next time. It should be fine to clear this out though if you see any .zip, .pdf or such on there you may want to leave those in. The reason for this is that they may be very large files that your site doesn’t have the resources to scan.

    Hope that helps!

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Whitelisted URLs under Firewall setting’ is closed to new replies.