can’t activate Firewall Extended Protection

Hi @sanchell21, thanks for reaching out to us.

I’ll need a bit more information from you to see which part of Wordfence isn’t working and where we might need to look for a solution.

Are you receiving any specific error messages or incomplete configuration notices? If so can you paste to me what they say and which section of the plugin they appear in?

It would also be helpful to see your site diagnostics to check the environment the plugin is running in. Can you send the diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

Note: For the fastest response time, please make sure and add any information or questions directly to this topic and not the email address above unless asked.

Thanks,

Peter.

Hi @wfpeter
I sent you both reports, My problem is;
**** After installing the wordfence plugin, I see the following notice….
“To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall: [Click here to Configure]”

**** Upon clicking [click here to configure] button a window pops up with the following message…

“We’ve preselected your server configuration based on our tests, but if you know your web server’s configuration, please select it now. You can also choose “Manual Configuration” for alternate installation details.”
The preselected server configuration is Litespeed/Isapu

**** As prompted, I download .HTACCESS and .USER.INI and then select [Continue]

**** I get an “Installation Successful” message window including “The changes have not yet taken effect. If you are using LiteSpeed or IIS as your web server or CGI/FastCGI interface, you may need to wait a few minutes for the changes to take effect since the configuration files are sometimes cached. You also may need to select a different server configuration in order to complete this step, but wait for a few minutes before trying. You can try refreshing this page.”

**** I close the message window but no matter how long I wait or refresh the page, I continue to see the notice at step 1 “To make your site as secure as possible, take a moment to optimize the Wordfence Web Application Firewall:”
Should this notice disappear or not? Is it an indication the setup process has not completed correctly?

Hello, Same issue here with O2Switch !

@zpierre So the problem comes from hosting (O2Switch)???

Hi @sanchell21, thanks for sending us your diagnostics.

Your diagnostic is actually reporting all-clear for scan errors and is correctly reporting inbound/outbound connections, there is a chance on Litespeed that some code needs to be added to the .htaccess file in the root directory of your site.

Your hosting provider is likely using the LiteSpeed external application abort so we’ll need to override that.

# BEGIN litespeed noabort
<IfModule rewrite_module>
RewriteEngine On
RewriteRule .* - [E=noabort:1]
</IfModule>
# END litespeed noabort

If this is in place, disable Start scan remotely and then try to run a scan as you would normally with debugging mode on. Paste me the debug information if problems persist despite this change.

There is further information here: https://www.wordfence.com/help/advanced/system-requirements/litespeed/

You may additionally wish to contact the host in case they are not allowing our IPs for any reason. These are highlighted on this page: https://www.wordfence.com/help/advanced/#servers-and-ip-range

Thanks again,

Peter.

@wfpeter Hi and thank you for your reply unfortunately this tip still does not solve my problem I will send you a new report by email I await a solution a thank you answer in advance

Hello,
Allow me to answer on this subject as well.
I contacted the host O2 Switch and they told me their servers are “Apache & mod_lsapi” and not LiteSpeed.

They also said the one that is close is : Apache + mod_php

Can we try with this one ?

Hi @zpierre and thanks for your answer unfortunately I tried with but it still does not work and for info on the phpinfo indicate that the servers are
Server LiteSpeed V7.8 CloudLinux 1.2 API
i am still waiting for a solution

Hi @sanchell21,

Yeah I agree with you, I ascertained that the server was running Litespeed so it sounds strange to hear reports to the contrary unless of course they offer multiple server solutions to different customers.

Were you able to contact the host to check that our latest IPs as highlighted on https://www.wordfence.com/help/advanced/#servers-and-ip-range are allowed? We changed IPs during a migration a number of weeks ago which went largely unnoticed for most, so there’s a chance your host specifically allowed our old ones and need to update them to prevent you having problems.

Let me know how you get on.

Peter.

Hello @sanchell21 and @wfpeter , I think I found a solution with O2 Switch Help.

I choosed manual installation for the firewall. Then you go in your O2Swich Cpanel, then “Sélectionner une version de PHP” or “Php selector” (or something like that in english).

If you have the current 7.3 php, you need to change it in order to have access to “options”.
For myself, I did activate php 7.4 and I check “Imagick” (it’s a module WordPress need from what I heard). Then, you click on “Set as current”

Then you go in options, and you add the URL given by WordFence in Manual Configuration that look something like this : /home/xxxxxxxxx/public_html/wordfence-waf.php
You have to add it in font of the 4th line that is called : “auto_prepend_file”

And then, it’s working !
Hope that works also for you ! Let us know

like that @zpierre

<?php
// Before removing this file, please verify the PHP ini setting auto_prepend_file does not point to this.

auto_prepend_file = ‘/home/xxxx/public_html/wordfence-waf.php’

if (file_exists(‘/home/xxxx/public_html/wp-content/plugins/wordfence/waf/bootstrap.php’)) {
define(“WFWAF_LOG_PATH”, ‘/home/xxxx/public_html/wp-content/wflogs/’);
include_once ‘/home/xxxx/public_html/wp-content/plugins/wordfence/waf/bootstrap.php’;
}
?>

Hey @sanchell21 , I’m not sure what you’re talking about.
Follow my explanations and in “options” (on PHP selection in Cpanel), copy paste the right url (the xxxxxx should be somehting different) on line 4 that is call “auto_prepend_file”.
So you just have to paste :

/home/xxxxxxxxx/public_html/wordfence-waf.php

Hi @zpierre for the first part I have already selected the PHP 7.4 and I have activated this option “Imagick” from the start already
But in the second part I didn’t quite understand what you meant if you wanted to explain me a little so that I could solve my problem
You want me to replace line 4?
Thanks in advance

Hey @sanchell21,
Yeah, from there, you have to click on “options” (still in your PHP Selector in O2 Switch Cpanel). In top of the screen, you have Extensions and then “Options”.
You have to click on “Options”. Then you’ll see PHP Options with the Current PHP Version.
The 4th line is called auto_prepend_file. On the right box next to it, you just have to copy part of the code given by WordFence when you choose a manual setup for the firewall.
It shoud be something like : /home/xxxxxx/public_html/wordfence-waf.php

And then, that’s it, it’s working and you’ll be at 55% for firewall protection. Hope you got everysteps because I can not be more specific ??

Here is a screenshot if www.remarpro.com allows the link : https://ibb.co/BTxQrrH

• This reply was modified 3 years, 9 months ago by Pierre Grimaldi.

@zpierre Thank you so much yeah it works with this method thank you so much problem solved.