Block all IP's from accessing wp-admin/wp-login

Hi,

Great question and one I’ll pass to the dev team to see if there were a safe way to do this as I don’t think we currently do this.

You could try this method. I haven’t tested this, so I’d try it when you didn’t have pressing issues to address. You can try whitelisting your ip address and then using country blocking to block every country from the login page BUT NOT the site, but that requires the premium version for country blocking to work. I’ll look and see if there is another way I’m overlooking but I don’t think I am from inside wordfence.

tim

Simplest way by IP (not in Wordfence) is to use .htaccess files.

Swedeman… Can you tell me a little bit more about using .htaccess to do this.

Thank you – I would hope they might consider my suggestion, as it could be very useful. ?? Thanks again everyone!

@rcuringt

Doing a search will bring up numerous resources to implement blocking using .htaccess files assuming you’re on an Apache server.

Just be aware that blocking users via IP address will require updating the allowed IPs when they change.

You may prefer to password protect access to wp-login.php and wp-admin instead.

One caveat I believe Mark has mentioned before is allowing access to admin-ajax.php when using IP blocking or password protection.

Agree with @montanagrafix that having this ability in WF would be quite useful.

@swedeman speaks the truth, as always. ??

Please do not password protect wp-admin unless you have allowed access to admin-ajax file. That will break many more things than just our stuff.

I’ll add the suggestion to the list of feature requests we have.

tim

@WF Support, has there been any development on this by chance?