Hi @bladeke,
For cases like this, we’d recommend having Learning Mode on for a short period. Click around the site and try to load the pages currently having problems. Once you’re done, remember to set the firewall back to “Enabled and Protecting”.
If you see Wordfence continuing to block something that you’ve tried during Learning Mode, visit the Live Traffic page after you see the behavior. If there is a block, check the reason after expanding the entry with the eye icon in the corner. You can filter Live Traffic by “Blocked” so it’s easier to find. You may find a specific firewall rule or Wordfence setting stated here after expanding the entry. The reason is shown in red text.
Feel free to paste that reason here if you’re unable to manually allowlist it successfully using the “ADD PARAM TO FIREWALL ALLOWLIST” button on the Live Traffic page. Allowlisting using these methods is much simpler than adding IPs manually in case not all GET/POST parameters or other values correctly match.
Let us know how you get on,
Peter.
Hi Peter,
Thank you very much for getting back to me!
Indeed, I see under “Live Traffic” that there’s a bunch of these from many of your IP’s:
Activity Detail
France was blocked by firewall for Directory Traversal (Requesting wp-config.php) in query string: file=..%2F..%2F..%2Fwp-config.php at XXXXXXX
11/4/2025 1:38:09 PM (11 hours 11 mins ago)
IP: 5.135.84.206 Hostname: tdn-5-135-84-206.gtranslate.net
Human/Bot: Human
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1.1 Mobile/15E148 Safari/604.1
I added them to he allowlist from that interface, I guess not all of them…
Best regards,
Karl
Hi @bladeke,
You may have added the correct IPs previously, but unless the parameters given matched the expected requests precisely, the firewall may still make blocks believing them to be malicious requests. Learning Mode and clicking around the site to ensure all translations are attempted should still be the best and easiest method.
There can be rare compatibility issues with plugins that change all parameters with every single request as Wordfence can’t allowlist them in advance, but so long as there’s something consistent, you should be able to add them all.
Thanks,
Peter.