Issues with IP detection

  • Resolved rokkashthomas

    (@rokkashthomas)


    5 years, 5 months ago

    I work for an agency and a number of our sites are behind a reverse proxy. Whatever IP detection option we use we are unable to correctly get the IP, so WordFence sees all traffic as coming from the same network and keeps blocking the admin login. Is there something we need to change in the way our reverse proxy works?

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @rokkashthomas,

    I think so that we can understand the setup on one of the sites running on the reverse proxy suffering from this issue, it would be beneficial to send us a diagnostic report to wftest @ wordfence . com. You can find the link to do so at the top of the Wordfence Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.

    Note: For the fastest response time, please make sure and add any information or questions directly to this topic and not the email address above unless asked.

    Thanks,

    Peter.

    Thread Starter rokkashthomas

    (@rokkashthomas)

    5 years, 5 months ago

    Thanks, I’ve sent the report from one of our sites that’s experiencing the issue.

    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @rokkashthomas, thank-you for providing that.

    Before we go any further, can I just check with you some of the information provided in our help guides?

    https://www.wordfence.com/help/dashboard/options/

    The above page states:

    Let Wordfence use the most secure method to get visitor IP addresses. Prevents spoofing and works with most sites.
    This is the default mode of operation for Wordfence. Wordfence will try to get a valid IP address from PHP and if that doesn’t work, it will look at data that a firewall or reverse proxy sends in case your website uses this configuration.

    Can I confirm that this definitely doesn’t return your public IP address when viewing the Wordfence options as found on sites like https://whatsmyip.com?

    Thanks,

    Peter.

    Thread Starter rokkashthomas

    (@rokkashthomas)

    5 years, 5 months ago

    Hi Peter,

    Yes, we’ve tried all the options to get the IP address, but it always returns the IP of the reverse proxy.

    If I change it to ‘X-Forwarded-For’, it detects my IP and the proxy IP, but where it says ‘Your IP with this setting’ it shows the proxy IP.

    Hope that helps.

    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @rokkashthomas, thanks for the extra information.

    You’re right in changing your setting to X-Forwarded-For but use the +Edit trusted proxies link to add the range: 207.246.240.0/24

    Thanks,

    Peter.

    Thread Starter rokkashthomas

    (@rokkashthomas)

    5 years, 5 months ago

    Brilliant, that’s done the trick, thanks Peter

    Plugin Support wfpeter

    (@wfpeter)

    5 years, 5 months ago

    Hi @rokkashthomas, that’s fantastic news, glad we could sort it for you!

    Don’t hesitate to start another topic in future if we can help you with anything else.

    Thanks,

    Peter.

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘Issues with IP detection’ is closed to new replies.