I am setting up some firewall rules to limit excess traffic from spam bots in different countries.
We only need people from Australia and New Zealand to view our website, so I have implemented (ip.geoip.country ne “AU”) and (ip.geoip.country ne “NZ”)
Which has substantially reduced the amount of spam I am getting from bots.
However, we also use Malcare to manage our Wordpress security and plugins. Since limiting traffic to Au & NZ only, Malcare doesn’t appear to be scanning our site.
Is there a way I can add a rule to allow Malcare to acces the site?
MalCare list their IP addresses on their site, so you need to add an expression to your firewall rule to exclude Malware. Something like the example below. I have also added Verified Bots, so that Google and such will be allowed index your site.