ShipStation and Firewall

  • Resolved GlobalCreations

    (@globalcreations)


    1 year, 9 months ago

    I could only find one reference to ShipStation in the forum, but the issue was never fixed. ShipStation worked fine on the staging site, I suspect because WF was in learning mode. The Issue, on the live site: ShipStation receives order information from WooCommerce, but WooCommerce does not receive information from ShipStation. Thus,

    1. Users get only the price option, in this case FedEX, provided by WooCommerce and not multiple options provided by ShipStation
    2. WordPress Admins never see the order status change from its initial setting, in this case ‘Processing’ when it is changed in ShipStation
    3. The ShipStation account holder sees an error in their ShipStation order grid when they update the shipping status on the ShipStation site. This is the action that results in 2.

    I put WordFence back into learning mode – that hasn’t helped after a day.

    ShipStation support did give me a list of eight IP addresses with the CIDR notation (e.g. like: 34.200.1.155/32) with the caveat that they change frequently so may not be good for long. I installed them all in WF – that didn’t help. Maybe WF doesn’t like the CIDR? I took that off – didn’t help.

    The web logs revealed that ShipStation is using RestSharp/106.3.1.0 as its user agent. In theory I should be able go to Wordfence > Firewall > Manage Firewall and the ‘Allowlisted URLs’ section and enter shipstation.com, Param Type: POST body, and the Param Name. I tried RestSharp/106.3.1.0 as the param name so that generates: request.body[RestSharp/106.3.1.0] for the parameter. That looks like it should work, but it doesn’t.

    I purged the server side cache and also disabled it – that didn’t help.

    No other firewalls on the system.

    I’m out of ideas, can anyone help?

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @globalcreations, thanks for reaching out about this.

    In which section of the plugin were you attempting to input the CIDR addresses? There are some sections where these are fine, but it’d be good to be sure.

    It does sound like the communication back to your site is being blocked by something (or failing) although there is one more thing you can try after Learning Mode and manually adding the params didn’t seem to. If you try to run a transaction that involves Shipstation, refer to your Live Traffic immediately afterwards to see if a firewall block is being picked up there. If so, you should be able to see which rule is causing the block by clicking that line (or “eye” icon) to expand it. Sometimes you are presented with a “ADD PARAM TO FIREWALL ALLOWLIST” button here that could solve any problems going forward.

    Failing this, please can you also send us a diagnostic to wftest @ wordfence . com. Click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email

    Thanks,
    Peter.

    Thread Starter GlobalCreations

    (@globalcreations)

    @wfpeter Thanks for your help! I tried the IP addresses with and without the CIDR in Wordfence > Firewall > All Firewall Options > ‘Allowlisted IP addresses that bypass all rules’ section. Neither helped. Where is the appropriate place to put CIDR addresses?

    Shipstation also suggests whitelisting a couple of shipstation subdomains. Is there a way to whitelist URLs without the associated user agent? I put them in there with the RestSharp user agent. Didn’t help.

    Thread Starter GlobalCreations

    (@globalcreations)

    Just sent the diagnostics.

    CmdrKeene

    (@shawnkeenegmailcom)

    I believe I’m having the same problem with my site that uses WooCommerce ShipStation + Wordfence.

    Thread Starter GlobalCreations

    (@globalcreations)

    @shawnkeenegmailcom @wfpeter

    Solved part of the problem. In my senility, I forgot that we had added a plugin to display the shipping costs. Once I installed and configured “Multi-Carrier ShipStation Shipping for WooCommerce” on our live site the shipping options and prices are now displayed during checkout. It’s odd to me that Shipstation doesn’t include that functionality. That leaves us with the problem related to the status change in Shipstation not showing up in Woo. Getting there.

    Thread Starter GlobalCreations

    (@globalcreations)

    @shawnkeenegmailcom?@wfpeter Solved the rest of the problem. The first thing I should have done would have been to disable Wordfence and see if the problem was resolved. Turns out, that didn’t resolve the problem and it wasn’t Wordfence at all. I got to thinking about other plugins that might block the Shipstation POSTs. Well, yeah – we still had WP-SpamShield on there. Turned that off and all is well. Unfortunately I was advised that this was all working in our staging site when it wasn’t working there either. Funny how a little misdirection like that can confuse things.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘ShipStation and Firewall’ is closed to new replies.