• Might suggest some clarification (or fix?) for the WF Firewall page.
    The WF firewall page says:

    “We’ve preselected your server configuration based on our tests, but if you know your web server’s configuration, please select it now.”
    – Apache +suPHP (recommended based on our tests)
    – Apache + mod_php
    – Apache + CGI/FastCGI
    “Alternate method: We’ve also included instructions to manually perform the change if you are using a web server other than what is listed in the drop-down, or if file permissions prevent this change. You will need to append the following code to your php.ini: “
    auto_prepend_file = ‘/home/mysite/public_html/wordfence-waf.php’

    I previously used the recommended setting above but started wondering if some quirk behaviors might be related to firewall settings. So I check with host. Host says any of the Apache settings EXCEPT +suPHP, but they actually use FastCGI. (GreenGeeks.com, all shared servers, in case helps another GG user). So I now I go through the firewall setup using the “FastCGI” selection.

    Upon completion I am returned to the same WF firewall screen above. It still shows the +suPHP recommendation. It does not confirm the FastCGI setting was used. (1) Was FastCGI actually used? (2) If so, with no confirmation on the WF firewall page, and no ID comment in .htaccess, how would a co-admin, new admin, or myself checking in at a future date, know what setting is running on this installation?

    Also, if I needed to go the manual route, there is no “ini.php” file at any level on my host workspace — would I create one — exactly where? The selected configuration process did not create one — should it have?

    I am just looking to confirm the correct firewall settings are in place so I can discount firewall as a potential cause of quirks.

    Thank you.

    https://wordpress.org/plugins/wordfence/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Hi wilderbee,
    The automatically detected installation suggestion seems to be correct in the vast majority of cases. If yours is not, we should definitely have a look at that.

    If you look at the Firewall page does it at “Protection level” say that you have “Basic” or “Extended” protection? This will tell you whether the configuration worked or not.

    Hi there,

    i think i have the same problem. I get the note: You will need to append the following code to your php.ini:auto_prepend_file = ‘/www…. ??
    My page still says: Basic protection

    htaccess file seems to be correct, .user.ini and wordfence-waf.php also.
    I really don´t have any idea whats wrong.

    Thanks a lot for help

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘confirm firewall settings’ is closed to new replies.