Renames the plugin and technical identifiers to satisfy WordPress.org naming and plugin-structure requirements.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3605301,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3605301,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3605301,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3605301,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.1.11"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3605301,"resolution":"1","location":"assets","locale":"","width":1585,"height":835},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3605301,"resolution":"2","location":"assets","locale":"","width":825,"height":840},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3605301,"resolution":"3","location":"assets","locale":"","width":1544,"height":266},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3605301,"resolution":"4","location":"assets","locale":"","width":739,"height":151},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3605301,"resolution":"5","location":"assets","locale":"","width":780,"height":420},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3605301,"resolution":"6","location":"assets","locale":"","width":950,"height":580}},"screenshots":{"1":"Configure Cloudflare Account IP List mode, synchronisation interval, historical WAF lookback, and block threshold from Network Admin.","2":"Validate the Cloudflare configuration, test blocking, manage list entries manually, and synchronise the multisite network.","3":"Review recent site-specific synchronisation activity across the WordPress multisite network.","4":"View the Cloudflare Account IP List created and maintained by Grey Rock Block Synchroniser.","5":"Review synchronised and manually managed IP addresses stored in the configured Cloudflare list.","6":"Configure a Cloudflare Custom Rule to block requests from addresses contained in the synchronised IP list."}},"plugin_section":[],"plugin_tags":[3882,1174,441,600,14385],"plugin_category":[51,54],"plugin_contributors":[271302],"plugin_business_model":[],"class_list":["post-339178","plugin","type-plugin","status-publish","hentry","plugin_tags-cloudflare","plugin_tags-firewall","plugin_tags-multisite","plugin_tags-security","plugin_tags-wordfence","plugin_category-multisite","plugin_category-security-and-spam-protection","plugin_contributors-greyscalezone","plugin_committers-greyscalezone"],"banners":{"banner":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/banner-772x250.png?rev=3605301","banner_2x":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/banner-1544x500.png?rev=3605301","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/icon-128x128.png?rev=3605301","icon_2x":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/icon-256x256.png?rev=3605301","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-1.png?rev=3605301","caption":"Configure Cloudflare Account IP List mode, synchronisation interval, historical WAF lookback, and block threshold from Network Admin."},{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-2.png?rev=3605301","caption":"Validate the Cloudflare configuration, test blocking, manage list entries manually, and synchronise the multisite network."},{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-3.png?rev=3605301","caption":"Review recent site-specific synchronisation activity across the WordPress multisite network."},{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-4.png?rev=3605301","caption":"View the Cloudflare Account IP List created and maintained by Grey Rock Block Synchroniser."},{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-5.png?rev=3605301","caption":"Review synchronised and manually managed IP addresses stored in the configured Cloudflare list."},{"src":"https:\/\/ps.w.org\/grey-rock-block-synchroniser-for-wordfence-and-cloudflare\/assets\/screenshot-6.png?rev=3605301","caption":"Configure a Cloudflare Custom Rule to block requests from addresses contained in the synchronised IP list."}],"raw_content":"\n
Grey Rock Block Synchroniser for Wordfence and Cloudflare sends qualifying Wordfence firewall blocks to Cloudflare so hostile traffic can be stopped at Cloudflare's network edge before it reaches the WordPress server.<\/p>\n\n
The name Grey Rock is inspired by the grey rock method: becoming uninteresting and unrewarding to someone seeking attention or a reaction.<\/p>\n\n
Grey Rock applies that concept to hostile website traffic. Wordfence identifies qualifying blocked IP addresses, and Grey Rock synchronises them with Cloudflare. Cloudflare can then stop those addresses at the network edge before their requests reach WordPress.<\/p>\n\n
The objective is simple: make your website boring to repeat attackers. Instead of allowing the same hostile traffic to keep reaching the server, Grey Rock helps the site respond with less exposure, less interaction and fewer consumed server resources.<\/p>\n\n
Grey Rock does not replace Wordfence, Cloudflare or a layered security program. It connects them so qualifying Wordfence blocks can be enforced earlier, closer to the source of the traffic.<\/p>\n\n
The plugin supports two Cloudflare destinations.<\/p>\n\n
Creates Cloudflare IP block rules for one zone.<\/p>\n\n
Use this mode when Wordfence blocks should protect one Cloudflare zone.<\/p>\n\n
Adds IP addresses to a reusable Cloudflare account-level IP list.<\/p>\n\n
Use this mode when several domains or Cloudflare zones should share the same list.<\/p>\n\n
An Account IP List does not block traffic by itself. You must create a Cloudflare Custom Rule with the Block action in every zone that should use the list.<\/p>\n\n
Example rule:<\/p>\n\n
ip.src in $wordfence_hot_blocklist\n<\/code><\/pre>\n\nThe recommended list name is:<\/p>\n\n
wordfence_hot_blocklist\n<\/code><\/pre>\n\nCurrent and historical Wordfence blocks<\/h4>\n\n
The plugin can synchronise:<\/p>\n\n
\n- Current Wordfence blocks when the installed Wordfence version exposes its active-block interface.<\/li>\n
- Historical Wordfence Web Application Firewall events recorded as
blocked:waf<\/code>.<\/li>\n<\/ul>\n\nHistorical synchronisation is configurable:<\/p>\n\n
\n- Lookback period: 1, 3, 6, 12 or 24 hours.<\/li>\n
- Minimum blocked events per IP address: 1 through 100.<\/li>\n
- Default lookback: 24 hours.<\/li>\n
- Default threshold: 1 event.<\/li>\n<\/ul>\n\n
Repeated events from the same address are deduplicated before synchronisation.<\/p>\n\n
Invalid, private and reserved IP addresses are rejected during historical-event processing.<\/p>\n\n
Multisite support<\/h4>\n\n
When network activated:<\/p>\n\n
\n- Network Admin can provide shared Cloudflare settings.<\/li>\n
- Individual sites may inherit the network configuration.<\/li>\n
- Site-specific overrides can be permitted by Network Admin.<\/li>\n
- Network Admin provides a Synchronise Network Now action.<\/li>\n
- Network Admin provides a combined Synchronisation Log.<\/li>\n
- Individual sites retain their own synchronisation logs and manual IP block pages.<\/li>\n
- Sites using independent settings retain their own site-level controls.<\/li>\n<\/ul>\n\n
Manual management and diagnostics<\/h4>\n\n
The plugin provides:<\/p>\n\n
\n- Cloudflare configuration validation.<\/li>\n
- A diagnostic add-and-remove test.<\/li>\n
- Manual account-list add and remove controls.<\/li>\n
- A required reason for manually added account-list entries.<\/li>\n
- Manual site-level IP blocking.<\/li>\n
- Synchronisation logs.<\/li>\n
- Cleanup and reconciliation where Cloudflare-entry ownership is isolated to one site.<\/li>\n<\/ul>\n\n
Wordfence compatibility<\/h4>\n\n
Wordfence does not provide a stable public API for every block source used by this plugin.<\/p>\n\n
Grey Rock checks whether the installed Wordfence active-block interface is available before using it. When that interface is unavailable, historical WAF synchronisation continues through the Wordfence event table.<\/p>\n\n
A future Wordfence release could change its internal class or database schema. Such a change may require a Grey Rock compatibility update.<\/p>\n\n
Independence and trademarks<\/h4>\n\n
Grey Rock Block Synchroniser for Wordfence and Cloudflare is developed independently by Greyscale Zone.<\/p>\n\n
This plugin is not affiliated with, endorsed by or sponsored by Wordfence or Cloudflare. Wordfence and Cloudflare are trademarks of their respective owners.<\/p>\n\n
External services<\/h3>\n\n
This plugin connects to the Cloudflare API when an administrator:<\/p>\n\n
\n- Validates saved Cloudflare settings.<\/li>\n
- Runs a diagnostic block test.<\/li>\n
- Manually adds or removes an IP address.<\/li>\n
- Runs synchronisation, cleanup or reconciliation.<\/li>\n
- Allows a scheduled synchronisation or cleanup event to run.<\/li>\n<\/ul>\n\n
The Cloudflare API is required because the plugin's purpose is to create and remove Cloudflare firewall entries.<\/p>\n\n
Depending on the configured mode and operation, the plugin sends some or all of the following data to Cloudflare:<\/p>\n\n
\n- The Cloudflare API token in an HTTPS Authorization header.<\/li>\n
- Cloudflare Account ID.<\/li>\n
- Cloudflare Zone ID.<\/li>\n
- Cloudflare account-list name or internal list identifier.<\/li>\n
- Public IPv4 or IPv6 addresses blocked by Wordfence.<\/li>\n
- A short comment describing the Wordfence or manual block reason.<\/li>\n
- Cloudflare list-item or firewall-rule identifiers when removing entries.<\/li>\n<\/ul>\n\n
The plugin retrieves Cloudflare account lists, list items and firewall access rules so it can validate settings, avoid duplicates, reconcile state and remove entries.<\/p>\n\n
Communication is sent directly from the WordPress server to Cloudflare over HTTPS using the WordPress HTTP API.<\/p>\n\n
The plugin does not send WordPress post content, user passwords, email addresses or the Cloudflare token to Greyscale Zone. It does not provide Greyscale Zone with telemetry or usage analytics.<\/p>\n\n
By configuring and using Cloudflare functions in this plugin, the administrator directs the plugin to transmit the described information to Cloudflare.<\/p>\n\n
Cloudflare Terms of Service:<\/p>\n\n
https:\/\/www.cloudflare.com\/terms\/<\/p>\n\n
Cloudflare Privacy Policy:<\/p>\n\n
https:\/\/www.cloudflare.com\/privacypolicy\/<\/p>\n\n
Cloudflare API documentation:<\/p>\n\n
https:\/\/developers.cloudflare.com\/api\/<\/p>\n\n
Privacy<\/h3>\n\n
The plugin stores its configuration in the WordPress database. This includes the Cloudflare API token and Cloudflare identifiers entered by an administrator.<\/p>\n\n
The plugin stores synchronised public IP addresses, block reasons, timestamps, expiration information and retry state in a site-specific WordPress database table.<\/p>\n\n
IP addresses may constitute personal data under some privacy laws. Site administrators are responsible for establishing a lawful basis, retention policy and appropriate disclosure for their use of Wordfence, Cloudflare and this plugin.<\/p>\n\n
Historical entries receive an expiration based on the configured lookback period. Temporary active Wordfence blocks may use the Wordfence expiration time.<\/p>\n\n
Manually added Cloudflare account-list entries remain until an authorised administrator or another authorised Cloudflare operation removes them.<\/p>\n\n
Uninstalling the plugin removes its local plugin options and tables according to the included uninstall routine. It does not automatically remove every entry previously sent to Cloudflare. Administrators should review the Cloudflare destination when permanently discontinuing the plugin.<\/p>\n\n\n
\n- Install and activate Wordfence.<\/li>\n
- Install and activate Grey Rock Block Synchroniser for Wordfence and Cloudflare.<\/li>\n
- Open Grey Rock Block Synchroniser in WordPress administration.<\/li>\n
- Select Zone Access Rules or Account IP List mode.<\/li>\n
- Create a restricted Cloudflare API token.<\/li>\n
- Enter the Cloudflare identifiers required for the selected mode.<\/li>\n
- Save the settings.<\/li>\n
- Validate the saved Cloudflare configuration.<\/li>\n
- Run the diagnostic test block.<\/li>\n
- Configure the historical WAF lookback and event threshold.<\/li>\n
- Run synchronisation.<\/li>\n<\/ol>\n\n
For multisite installations, network activate the plugin and configure shared settings from Network Admin when appropriate.<\/p>\n\n
Zone Access Rules mode<\/h4>\n\n
Required settings:<\/p>\n\n
\n- Cloudflare API Token<\/li>\n
- Cloudflare Zone ID<\/li>\n<\/ul>\n\n
Required Cloudflare token permissions:<\/p>\n\n
\n- Zone - Firewall Services: Edit<\/li>\n
- Zone - Zone: Read<\/li>\n<\/ul>\n\n
Account IP List mode<\/h4>\n\n
Required settings:<\/p>\n\n
\n- Cloudflare Account ID<\/li>\n
- Cloudflare API Token<\/li>\n
- Cloudflare List Name<\/li>\n<\/ul>\n\n
Required Cloudflare token permission:<\/p>\n\n
\n- Account - Account Rule Lists: Edit<\/li>\n<\/ul>\n\n
The plugin resolves the Cloudflare list's internal identifier automatically.<\/p>\n\n
After configuring the list, create a Cloudflare Custom Rule with the Block action in every zone that should use it.<\/p>\n\n\n
\nDoes the plugin require a Cloudflare Global API Key?<\/h3><\/dt>\nNo. Use a restricted Cloudflare API token.<\/p><\/dd>\n
Does an Account IP List block traffic by itself?<\/h3><\/dt>\nNo. Create a Cloudflare Custom Rule with the Block action in every zone that should use the list.<\/p><\/dd>\n
Can one Cloudflare list protect several domains?<\/h3><\/dt>\nYes. Account IP List mode can maintain one reusable account-level list. Each Cloudflare zone must have a Custom Rule that references the list.<\/p><\/dd>\n
Does the plugin synchronise historical Wordfence firewall events?<\/h3><\/dt>\nYes. It reads qualifying Wordfence WAF events recorded as blocked:waf<\/code> within the configured lookback period.<\/p><\/dd>\nWhat historical lookback periods are available?<\/h3><\/dt>\n1, 3, 6, 12 and 24 hours.<\/p><\/dd>\n
Can I require several Wordfence block events before an IP is sent to Cloudflare?<\/h3><\/dt>\nYes. The historical block threshold accepts whole numbers from 1 through 100.<\/p><\/dd>\n
What happens if Wordfence does not expose its active-block interface?<\/h3><\/dt>\nThe plugin continues using historical Wordfence WAF events instead of terminating synchronisation.<\/p><\/dd>\n
Does the plugin support WordPress multisite?<\/h3><\/dt>\nYes. It supports shared Network Admin settings, optional site-specific overrides, network synchronisation for inheriting sites and a combined Network Admin synchronisation log.<\/p><\/dd>\n