• joeyjoejoy

    (@joeyjoejoy)


    I was wondering if there was a way to view the custom pattern blocking rules that you have created?
    can’t seem to find a way to view them so they could be edited or to even see if I’ve already made a rule for something I want to make up.

Viewing 7 replies - 1 through 7 (of 7 total)
  • wfdave

    (@wfdave)

    Hi @joeyjoejoy,

    Your custom blocking rules are viewable at Wordfence -> Firewall -> Blocking. It should read Current blocks for _________, and under it you should see a table with all the blocking rules.

    If you don’t see this table, there may be a plugin conflicting with the rendering of the table. Let me know what other plguins you have installed.

    Dave

    Thread Starter joeyjoejoy

    (@joeyjoejoy)

    Hi Dave, The only table that comes up on the blocking page is the list of all the recently blocked IP’s and the reason they were blocked, whether it was one of my custom pattern choices or someone trying to directly access the /xmlrpc or /user?* which in the last 3 days has grown exponentially (prob because of a facebook campaign I did) with 71 complex attacks so far today and 207 for the month so far ! Hence my need to beef up security and get the wordfence running at its best so I don’t have to login and keep manually blocking IPs on the live feed (is there a way to auto block and IP after it triggers a wordfence block? because the same IPs just keep trying every 2 mins)

    The other plugins I am running at the min to try and head off this crap include..

    All in one Favicon
    Change WooCommerce Add to Cart Text
    IP Geo Block
    JSM’s Force SSL / HTTPS
    Login No Captcha reCAPTCHA
    ShortPixel Image Optimizer
    W3 Total Cache
    WooCommerce
    WooCommerce Blocks
    Wordfence Security
    Yoast SEO

    • This reply was modified 6 years ago by joeyjoejoy.
    wfdave

    (@wfdave)

    Hi again,

    Can you go into Wordfence -> All Options -> Rate Limiting, and set How long is an IP address blocked when it breaks a rule to a higher value? (Such as one hour, two hours, etc)

    This is where it is located: https://i.imgur.com/Nr92uOP.png

    Dave

    Thread Starter joeyjoejoy

    (@joeyjoejoy)

    Yes I know that part.
    Still trying to find a way to see/edit/remove my custom pattern auto blocks

    Scott

    (@scooter1)

    @joeyjoejoy

    The Gray shaded row at the top of the table allows you to sort the table by selecting one of the columns, i.e., “Block Type, Detail, Rule Added,” etc. Also, try toggling the “Show Wordfence Automatic Blocks” on or off.

    As far as your question: “is there a way to auto block and IP after it triggers a wordfence block? because the same IPs just keep trying every 2 mins,” Try going to “Live Traffic” and filtering by “Blocked”, and or “Blocked by Firewall.”

    Hope this helps ??

    Hi again,

    There are only 3 places where blocking rules exist.

    1. Wordfence-provided blocks – which can only be enabled or disabled (for example the XSS rule, SQL injection rule)

    2. IP range blocks that you set

    3. Custom pattern blocks, that deal with referrer, hostname, useragent, etc

    The 3rd one, is found in Wordfence – Firewall – Blocking. If you cannot see your custom rules there, they might have been deleted.

    Dave

    Thread Starter joeyjoejoy

    (@joeyjoejoy)

    All I can see is a list of the recent ban events that have happened because of the blocks I have chosen.
    Maybe for a future update, there might be a table that lists the custom pattern blocks you have chosen so that you can see what you already have on auto block.
    Because I’ve had to add whole countries to my block list to counter recent hacking attempts on my website, and down the line I might want to come back and review those IP bans but won’t know what is banned and what isn’t from custom lists I’ve made up.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘wordfence Custom Blocks’ is closed to new replies.