Hi Gerroald,
Maybe you can help me then. The issue does not happen if the iThemes Security plugin is deleted. Maybe I am not putting the mod_deflate and mod_expires commands in the proper place of the .htaccess file after the IThemes security plugin is activated. I have tried putting in the statements before the iThemes Security statements in the .htaccess file and I have also put them in WordPress part of the .htaccess file. Both cause the 500 error. Where do you suggest putting the statements in the .htaccess file?
Not fixed v4.0.27.
Checked “Enable ban users” added IP’s to Ban Hosts box. IP addresses where NOT added to .htaccess file. Went back into plugin and “Enable ban users” was unchecked, but IP addresses still in Ban Hosts box.