404 Detection

Hello @dpinc

Full path means:

/site/public_html/wp-content/yourcustomdirectory
It is path on the server.

If just block folder it will automatically block all files & sub folder of the parent folder? Do I need wild card * ?

I need to double-check this with the Defender team. We will let you know how exactly this works.

kind regards,
Kasia

/public_html/wp-content/…….

or

domain.com/public_html/wp-content/

If block Filetypes & Extensions example?

Hello there @dpinc

The full path can be any of these, as this depends on how your server is setup.
You may have to contact your hosting provider about it.

As for wildcard support, there is none at the moment, but we’re going to introduce this in version 2.4.

Warm regards,
Dimitris

/value/public_html/directory/wp-signup.php

Save purge cache not showing any 404 or redirect

/home/xxx/public_html/xxx/ or without slash ending /

Filetypes & Extensions Blacklist

.php
php

full file name.php ?

Need to include full path server or domain url

Hi @dpinc

I hope you are doing well.

/home/xxx/public_html/xxx/ or without slash ending /

It will read the path, it can end with or without the slash.

Filetypes & Extensions Blacklist

If this is a file you can add full file path including name.php

For extension, you can use .php

On the upcoming update, we will include multiple text fixes to make it clear.

Let us know if you need any further help on this.
Best Regards
Patrick Freitas

All the blacklist will show 404 error or banned directly?

I’m testing but it seem not working to block anything

Hello @dpinc

Can you please elaborate a bit more on this?
How exactly are you testing this?
Please advise!

Thank you,
Dimitris

/home/xxx/public_html/directory/

/home/xxx/public_html/directory/file.php

It should redirect or show 404 am I right ?

What will the blacklist show? How would I know it’s work?

I save the settings purge litespeed cache & CDN it’s still the same

HI @dpinc

I hope you’re well today!

It is supposed ot show 404 for first visit and immediately ban (lockout) a visitor/bot entirely after any attempt of visiting such black-listed location (so serve the message that you defined in lockout settings).

Have you checked it on site using incognito browser mode too and/or being connected (and not logged-in to the site) from other IP/network?

You should see logouts in standard logout logs in Defender -> Firewall are. I understand there’s nothing there, right? Are there logged an attempt to actually access those blacklisted locations?

Kind regards,
Adam

No 404 on first visit on directory and/or file

Not seeing any block/ban message such as lockout etc

Using same IP

Hello @dpinc ,

Is it possible for you to share with us the live url that you try to block and show the screenshot of your settings?

kind regards,
Kasia

https://pasteboard.co/JkZep1O.jpg

See this screenshot with the above settings

/home/whatever/directory/file.php

Or

/home/whatever/directory/

Hi @dpinc,

Thanks for providing further details. On testing this further, I could also notice anomalies as you have mentioned and seems more like an issue within the plugin side.

I’m bringing this into our developer’s attention to see what might be causing this and if there is any specific workaround or a quick patch that could be suggested.

Will keep you posted once I get further feedback asap.

Kind Regards,
Nithin