• Resolved murray654

    (@murray654)


    Recently, I changed the IP addresses in the black list. But this feature no longer works and I have to disable it. I think it caused an error 500. I have pasted the original and new versions of the IP Blacklist section in the htaccess file (I removed most IP addresses but left 2 examples)

    Original version:

    #AIOWPS_IP_BLACKLIST_START
    <IfModule !mod_authz_core.c>
    Order allow,deny
    Allow from all
    Deny from 103.21.182.69
    Deny from 159.203.0.0/16
    </IfModule>
    <IfModule mod_authz_core.c>
    <RequireAll>
    Require all granted
    Require not ip 103.21.182.69
    Require not ip 159.203.0.0/16
    </RequireAll>
    </IfModule>
    #AIOWPS_IP_BLACKLIST_END

    New version:

    #AIOWPS_IP_BLACKLIST_START
    deny 103.21.182.69;
    deny 159.203.0.0/16;
    #AIOWPS_IP_BLACKLIST_END

    With that new format my website is broken until I disable the blacklist.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, are you saying this feature used to work in your site. If that is correct, what has changed in your site or server?

    Thank you

    Thread Starter murray654

    (@murray654)

    Hi, Sorry for the delay. The notification email went to spam. I have not made changes to the IP blacklist for a long time. So a lot has changed on the server.

    This is the contents of System Info in your plugin:

    Site Info
    
    Plugin Version : 4.4.9
    WP Version : 5.8
    WPMU: No
    MySQL Version : 5.5.68
    WP Table Prefix : REDACTED
    PHP Version : 7.3.30
    Session Save Path : /var/www/vhosts/REDACTED/tmp
    WP URL: https://www.REDACTED
    Server Name : REDACTED
    Cookie Domain : www.REDACTED
    CURL Library Present : Yes
    Debug File Write Permissions : Writable
    
    PHP Info
    
    PHP Version : 7.3.30
    PHP Memory Usage: 12.35 MB
    PHP Memory Limit : 256M
    PHP Max Upload Size : 8M
    PHP Max Post Size : 8M
    PHP Allow URL fopen : Off
    PHP Display Errors : Off
    PHP Max Script Execution Time : 30 Seconds
    Name	Version	Plugin URL
    
    Active Plugins
    
    All In One WP Security	4.4.9	https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin
    Titan Anti-spam & Security	7.2.7	http://ww.wp.xz.cn/plugins/anti-spam/
    The SEO Framework	4.1.4	https://theseoframework.com/
    Autoptimize	2.9.1	https://autoptimize.com/
    Black Studio TinyMCE Widget	2.6.9	https://ww.wp.xz.cn/plugins/black-studio-tinymce-widget/
    Comment Reply Email Notification	1.12.0	https://ww.wp.xz.cn/plugins/comment-reply-email-notification/
    Email Address Encoder	1.0.22	https://encoder.till.im/
    GitHub Updater	9.3.0	https://github.com/afragen/github-updater
    hCaptcha for Forms and More	1.11.0	https://hcaptcha.com/
    Ninja Forms	3.5.7	http://ninjaforms.com/?utm_source=Ninja+Forms+Plugin&utm_medium=readme
    Responsive Lightbox	1.3.4	http://ww.wp.xz.cn/plugins/responsive-lightbox-lite/
    Advanced Editor Tools (previously TinyMCE Advanced)	5.6.0	https://ww.wp.xz.cn/plugins/tinymce-advanced/
    Two Factor Authentication	1.10.4	https://www.simbahosting.co.uk/s3/product/two-factor-authentication/
    WPCustom Category Image	2.1.13	https://ww.wp.xz.cn/plugins/wpcustom-category-image/
    Plugin Support vupdraft

    (@vupdraft)

    Hi,

    Can you try the following.

    <RequireAll>
    Require all granted
    Require not ip 1.2.3.4
    </RequireAll>

    Be sure to replace 1.2.3.4 with the IP address to be blocked.

    You may block multiple IPs by repeating the line Require not ip 1.2.3.4 for each address you wish to block.

    Thread Starter murray654

    (@murray654)

    Hi vupdraft,

    That would work if I was editing the .htaccess file myself. The above is a discussion about how the feature of this plugin called ‘blacklist’ is breaking the site by inserting wrongly formated data in the .htaccess file…

    Edit: On another domain the feature is working… so I have to go back and look at my blacklist at the original domain – maybe there is something wrong in that original list of IPs – something is probably in the wrong format there…

    • This reply was modified 4 years, 8 months ago by murray654.
    • This reply was modified 4 years, 8 months ago by murray654.
    Thread Starter murray654

    (@murray654)

    I tried with just one ip address and it still broke the site.
    I tried to reinstall the plugin but it did nothing – still broke the site.
    I am puzzled as this is on the same server as the other domain.

    Plugin Support vupdraft

    (@vupdraft)

    Hi,

    The ip: 159.203.0.0/16 is not a valid IP format, is this what you are entering into the blacklist manager or has All in one changed it to this?

    Thread Starter murray654

    (@murray654)

    To answer your question 5 months ago. I type 159.203.*.* into the black list feature and 159.203.0.0/16 is what appears in blacklist section in htaccess

    The reason I am back here is the same issue on another domain. I have lots of failed login attempts (brute force) and want to limit them. So I tried to blacklist some IPs

    Immediately after adding the IPs to the blacklist, the site is giving errors “Internal Server Error”

    Server log contains:
    [core:alert] /var/www/vhosts/mydomain.co.za/httpdocs/.htaccess: deny requires at least two arguments, 'from' followed by hostnames or IP-address wildcards, referer: https://refererdomain.co.za/

    This is the section of htaccess causing the error:

    #AIOWPS_IP_BLACKLIST_START
    deny 135.181.61.155;
    deny 74.208.87.43;
    #AIOWPS_IP_BLACKLIST_END
Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘IP Blacklist breaks website’ is closed to new replies.