can’t set up firewall

Hi @oga23,

Have you followed the steps described in the Firewall Setup Guide?

In the drop-down list, which option appears as “Recommended based on our tests“?

Once you select an option and click “Continue”, what happens? Do you get to the page where you are prompted to download your .htaccess file?

Does any of these issues describe what you’re experiencing?

hi,
yes, i did everything as described.
In the dropdown list based on your test the option apache+mod.php is chosen.
i get to the page with -htacces download and can continue to set up the firewall. but on the last page i get the warning with the red line that it takes some minutes to set it up and refresh page in a few minutes. when i refresh after hours, the warning is still there and i get the option on the top of your pages to set up firewall.
i just now deactivated wordfence and activated it back.
there was still the line on top to set up firewall but on dashboard where it says feature status for firewall it says enabled. ? is this normal and i get all this because the firewall is in learning mode?

i would love to give you an answer regarding those issues but i don’t get any warnings and really don’t know how my server is configured, as i am on shared hosting with ssl…

@oga23,

I believe Wordfence Firewall is enabled and what you’re now trying to do is to carry out the optimization procedure.

At the moment, if you go to your WordPress site admin page –> Wordfence –> Firewall –> Web Application Firewall tab (which is the default tab on that page), your Protection Level should read Basic WordPress Protection.

Once you’ve optimized the Firewall, it will read Extended Protection.

You can see a detailed explanation of the difference between these 2 protection levels in this article on our docs platform.

In order to find out which Firewall setup you should be using:

• Go to the Wordfence Tools page
• Click the Diagnostics tab
• In the Other Tests section of the Diagnostics page (near the bottom of the page), click the link that reads Click to view your system’s configuration in a new window. This will open a Wordfence System Info page.
• Check the Server API field. Is it consistent with the parameter which is “Recommended based on our tests“?

Another thing you might want to check is the content of the .htaccess file (at the root of your WordPress install) to see if you can find a “# Wordfence WAF” section where the auto_prepend_file variable is set.

In case the auto_prepend_file isn’t set, please check the permissions on the .htaccess file.

If it is set, then contact your hosting provider to check if the use of auto_prepend_file has been disabled.

@oga23,

I believe Wordfence Firewall is enabled and what you’re now trying to do is to carry out the optimization procedure.

At the moment, if you go to your WordPress site admin page –> Wordfence –> Firewall –> Web Application Firewall tab (which is the default tab on that page), your Protection Level should read Basic WordPress Protection.

Once you’ve optimized the Firewall, it will read Extended Protection.

You can see a detailed explanation of the difference between the 2 protection levels in this article on our docs platform.

In order to find out which Firewall setup you should be using:

• Go to the Wordfence Tools page
• Click the Diagnostics tab
• In the Other Tests section of the Diagnostics page (near the bottom of the page), click the link that reads Click to view your system’s configuration in a new window. This will open a Wordfence System Info page.
• Check the Server API field. Is it consistent with the parameter which is “Recommended based on our tests“?

Another thing you might want to check is the content of the .htaccess file (at the root of your WordPress install) to see if you can find a “# Wordfence WAF” section where the auto_prepend_file variable is set.

In case the auto_prepend_file isn’t set, please check the permissions on the .htaccess file.

If it is set, please contact your hosting provider to check if the use of auto_prepend_file has been disabled.

yes, that is exactly what i needed!
i found the configuration of my server and will contact my hosting provider.
Thank you so much, @wfyann, have a great weekend.