Hi there! Could you post your site URL here, so I can have a look?
Oh sorry. What a rookie move 🙂
It is http://www.runningwithrhyno.com
It was connected before but I disconnected because I was having issues on my WordPress App on my iPhone. I was told by WordPress support to disconnect on the website in order for the App to work. Now nothing works.
This is the error:
Your website needs to be publicly accessible to use Jetpack: site_inaccessible
Error Details: The Jetpack server was unable to communicate with your site [HTTP 406]. Ask your web host if they allow connections from WordPress.com. If you need further assistance, contact Jetpack Support: http://jetpack.me/support/
I was told that “the plugin, is known to have vulnerabilities.” If you send us the IP address, we can whitelist, other than that, I’m not sure there is much more we can do.”
What is the IP address?
Thanks,
Crystal
http://www.runningwithrhyno.com
Hi Crystal! Thanks for the additional info. Judging by your latest replies, it sounds like your host is blocking Jetpack’s connection. The 406 error usually suggests your host is blocking the connection with some mod_security rules.
You could whitelist all of our IPs, but down the line they may change, or you may want to give access to other services and experience the same issues. Instead, I’d suggest allowing all connections to XML-RPC, and disabling the vector typically used by hackers with a plugin like this one:
https://wordpress.org/plugins/disable-xml-rpc-pingback/
That should solve most DDOS problems while still allowing services like Jetpack to access your site’s XML-RPC file.
If your hosting provider doesn’t want to allow all connections to Jetpack, you can use these IPs:
All of the IPs listed at http://whois.arin.net/rest/org/AUTOM-93/nets
185.64.140.0/22
2a04:fa80::/29
I hope that helps! Please let me know if you have any questions.
Hi Ryan
So I was told by my security people I could whitelist Jetpack but I have to provide the IP address to them. (I don’t know what it is. Could you provide it?)
Or should I install https://wordpress.org/plugins/disable-xml-rpc-pingback/ as you suggested and this will fix everything?
Crystal
Hi Crystal,
You can tell them they’ll need to whitelist the following:
Let me know if that does the trick!
Thanks, Ryan.
Is this a common issue? I just sent off the info to the security team.
Crystal
It’s not an uncommon issue, but it really depends on your host. In this case, it seems your host has some strict security settings which are responsible for the trouble. But hopefully whitelisting the IP addresses will resolve the issue.
Thank you. I will let you know how it goes.
Hi so apparently they have “whitelisted” the IP addresses. I think there must be a waiting period because I tried to install Jetpack but nothing has changed.
I can’t connect my Jetpack. It wants me to log into WordPress and my Worpress log in is through Bluehost so WordPress doesn’t recognize my log in info.
This is my log in address: http://andipassaro.com/wp-login.php
My web address is andipassaro.com
Thank you.
@yourfinesthour: I’d recommend following up with your host, to confirm that they whitelisted the full list of IP addresses.
@andipassaro: Could you please start your own thread, as per the Forum Welcome?
http://wordpress.org/support/plugin/jetpack#postform
Thank you!
