htaccess: order not allowed here

Hi – I’ve been having an issue with Better WP Security crashing my site. It appears that BWPS is writing to the htaccess file banning an IP, which I can see in the related log with the statement “htaccess: order not allowed here”. When I deactivate the plugin and comment out/remove this portion of htaccess, my site is accessible again.

From my htaccess file:

# BEGIN iThemes Security
#Quick ban IP. Will be updated on next formal rules save.
SetEnvIF REMOTE_ADDR “^114\.143\.83\.134$” DenyAccess
SetEnvIF X-FORWARDED-FOR “^114\.143\.83\.134$” DenyAccess
SetEnvIF X-CLUSTER-CLIENT-IP “^114\.143\.83\.134$” DenyAccess
order allow,deny
deny from env=DenyAccess
deny from 114.143.83.134
allow from all

From the error log (URLs removed)

[Fri Apr 24 09:08:32.598985 2015] [core:alert] [pid 7689] [client 66.249.64.35:61234] /var/www/.htaccess: order not allowed here, referer: http://www.—
[Fri Apr 24 09:08:35.924271 2015] [core:alert] [pid 7668] [client 116.33.2.37:63990] /var/www/.htaccess: order not allowed here, referer: http://www.—/wp-login.php
[Fri Apr 24 09:08:36.029724 2015] [core:alert] [pid 7742] [client 116.33.2.37:63998] /var/www/.htaccess: order not allowed here, referer: http://www.—/wp-login.php
[Fri Apr 24 09:08:37.300177 2015] [core:alert] [pid 7773] [client 108.31.190.49:58515] /var/www/.htaccess: order not allowed here, referer: http://www.—/wp-login.php

Any idea how I can configure the plugin to protect the site but not crash it?

Thanks,

Ryan

https://ww.wp.xz.cn/plugins/better-wp-security/