WordPress Firwall

I’m getting firewall notifications from “referrer=http://facebook.com…..”

Are these always safe to whitelist? And can anyone explain how to manually whitelist? Or how to change the permissions so that the “whitelist this variable” link at the bottom of the emails will work?

(I’ve tried contacting support for the plugin but I get no replies from them at all.)