My security app, WordFence is being blocked by CloudFlare. How do I whitelist ip

Website, Application, Performance Security
1

What is the name of the domain?

florida-medicare-advantage.com

What is the issue you’re encountering

My security app, WordFence is being blocked by Cloudflare. How do I allowlist their ip addresses?

What is the current SSL/TLS setting?

Full

2

First, check your Cloudflare Security Events to know exactly what rule is triggering the blocking: https://dash.cloudflare.com/?to=/:account/:zone/security/events

Alternatively, you can preemptively allowlist WordFence by following their instructions here (under “Cloudflare connection issues”): https://www.wordfence.com/help/central/connect/

Good luck!

1 Like
3

Thanks for the reply! Unfortunately, the way those instructions read, I need to have an enterprise account. Is there another way?

4

I’ve manage couple of WordPress instances using Free plan type with Wordfence, no issue. Just allowlist your server IP address and Wordfence in the IP Access Rules.

Furthermore, is the “CF-Connecting-IP” HTTP header option for Cloudflare in the Global Options enabled? :thinking:

Use the Cloudflare “CF-Connecting-IP” HTTP header to get a visitor IP. Only use if you’re using Cloudflare.

Wordfence is fully compatible with Cloudflare, and in some configurations, Cloudflare will send the real visitor IP address to your web server using the CF-Connecting-IP HTTP header. If Cloudflare support personnel have advised you that this is the case, then enable this option in Wordfence.

Note that Cloudflare has several configurations including their own web server module that takes care of detecting the visitor IP address, so be sure to work with their technical support staff and read their documentation to determine which configuration you are using.

Help:

5

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.