Make Allowlisted URLs permanent

Thanks for reaching out.

Can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

Tim

Sent

Thanks for sending that in. I checked the diagnostics report and was specifically looking to see if any of the tables reported being corrupted. None do so I don’t think that’s the issue.

Before we go any further, when you say the rules disappear do you mean they aren’t visible in the Allowlisted URLs section on the Firewall > All Firewall Options page on your site? Or do you mean they just don’t work anymore?

Can you also describe how you are getting a false positive block? I just want to be sure I understand the situation better.

Tim

Hi Tim,

Thanks for investigating the issue.

Yes exactly, the rules disappear from the Allowlisted URLs section on the Firewall > All Firewall Options page and thus also stop working. Therefore, the client is recurrently experiencing the same false positive block, every time the rule has disappeared from the Allowlisted URLs section.

The false positive happens on image upload on the post edit page, i.e., a request to admin-ajax.php.

Best,
Brogr

Thanks for clarifying that.

Can you send a copy of the /wp-content/wflogs/config-livewaf.php file to us at the same address you sent the diagnostics report to? Add your forum username (@brogr) in the subject and a link to the post in the message body. Reply here once it is sent.

Thanks!
Tim

Sent on May 23

Thanks for sending that in. I sent the file you emailed over to the team to look at and they say the file looks like it should. That has been reported a time or two but it is rare. What we’d suggest at this point would be to use the MySQLi storage engine to optimize the WAF. You can read more about how to switch to it in our help docs.
https://www.wordfence.com/help/firewall/mysqli-storage-engine/
This should prevent you from having to re-enter the same rule over and over.

Please let us know how it goes.

Tim

In the meantime, the rules have disappeared once again from the Allowlisted URLs section…

I’ve now switched to MySQLi storage, and added the rules again. Hopefully it will stick this time.

Let me know.

Tim