WordFence blocking RoundCube

Hi @valtertf, thanks for reaching out to us.

I’ve not heard of this happening before with this product, but that may be because Roundcube may normally be installed in a different folder to your public WordPress files. There is a chance that Live Traffic is picking up the block, so it’s sometimes a good idea to get fresh data by triggering the block and immediately checking Live Traffic afterwards. You should be able to see which rule caused the block by clicking the entry (or “eye” icon) to expand it. Sometimes you are presented with a “ADD PARAM TO FIREWALL ALLOWLIST” button here that could solve the problem going forward.

Because the Roundcube product isn’t a WordPress plugin, I don’t think Learning Mode while logged in as an admin would necessarily help but could be worth a try. From the Wordfence Dashboard click on Manage WAF. Then you will see Basic Firewall Options > Web Application Firewall Status. Change the option to Learning Mode. Now perform some email actions that were causing the issues. Wordfence may learn that the communication taking place at this time is normal and will allow them in the future. After you have finished testing, make sure to switch the WAF from Learning Mode back to Enabled and Protecting.

Let me know how you get on!

Peter.

Hello @wfpeter , thanks for such a quick and complete answer. You are right about RoundCube, it is normally installed outside the reseller accounts. This was a very uncommon situation when a custom installation was needed.

I did not find the options you mentioned about the Live Traffic.. as all I see are brute force logins attempts being blocked. Your suggestion about the “Learning Mode” did the trick. I turned Learning mode on, hit save button, then logged into RoundCube and forwarded a few messages. Then made Wordfence back to “Enable and Protecting” and hit save button again. E-mails are being forwarded are they should. This Learning Mode is a great feature. One less problem for me. Thanks a lot Peter! Wordfence could sell paid online classes for beguinners, maybe in Udemy or somewhere else like it. Have a great day Peter.

Valter

PS:
For those who have a problem like this in the future, another possible fix to try would be to install the RoundCube or whathever script you need in a subdomain different of where WordPress is installed. Think of the subdomain like it was another domain hosted in the same host account. Obviously WordFence ‘Learning Mode’ is by far the easiest and faster solution.