• Resolved spottykay

    (@spottykay)


    Hi,
    I have setup a firewall setting on my website’s wordfence settings to block visitor if user requests exceeds 10.

    Now I can’t use wordfence on my site when enabled. Had to rename it’s folder name to keep it disabled for now.
    I’ve tried checking if I can change the settings via the file manager or database but I can’t find where I can modify the configuration

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hello spottykay,

    I can help you.

    First of all, if you set up for visitors to be blocked after they exceeds 10, this is not ok. Every user will be blocked on your site. If you want to prevent loads on your website, you can increase to 60 or 120. 60 can have negative results but 120 is ok.

    You can’t access to your website because you are blocked, actually your IP is blocked and IP of any other user who exceeds 10.

    What you should do is to unblock your IP under Firewall -> Blocks. You will see all blocked IP-s and the reasons.

    If you want to prevent your IP to be blocked in the future, you can add your IP on the whitelist under All Settings on WordFence. You can add as many IP you want.

    Plugin Support wfpeter

    (@wfpeter)

    Hi @spottykay,

    I would echo the thoughts above that 10 is certainly too low. If you’ve been blocked and cannot take further actions, rename the?/wp-content/plugins/wordfence?plugin folder to “wordfence_bak” (without quotes). This should let you access and log into your site normally.

    You can then rename the folder back to “wordfence”, but?if you become blocked again immediately due to this setting?it’s sometimes necessary to install the?Wordfence Assistant?plugin to?disable?the firewall before trying to reenable Wordfence. This would allow you to remove your IP block from the?Wordfence > Blocking?page and change your settings.

    I usually set these values to start with and adjust if needed: Rate Limiting Screenshot

    • If anyone’s requests exceed – 240 per minute
    • If a crawler’s page views exceed – 120 per minute
    • If a crawler’s pages not found (404s) exceed – 60 per minute
    • If a human’s page views exceed – 120 per minute
    • If a human’s pages not found (404s) exceed – 60 per minute
    • How long is an IP address blocked when it breaks a rule – 30 minutes (or more if you prefer)

    I also always set the rule to Throttle instead of Block. Throttling is generally better than blocking with crawlers because any good search engine understands what has happened if it is mistakenly blocked and your site isn’t penalized because of it.

    Don’t forget to also reenable the firewall again if you had to disable it earlier.

    Thanks,
    Peter.

    Thread Starter spottykay

    (@spottykay)

    Thanks for the guide,
    I finally restored it ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.