Rate Limiting & Advanced Blocking section

  • Resolved kristinubute

    (@kristinubute)


    8 months, 2 weeks ago

    Hi

    Could you advise on the Rate Limiting & Advanced Blocking section in your plugin. All are set to full throttle. Can this then affect the client server to MAX out CPU & Memory if something goes to full throttle? If you could advise HOW this section with settings work please?

    What does this mean please?

    I’ve got a client site where are now keep getting 508, 503

    Service Unavailable

    The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

    Additionally, a 503 Service Unavailable error was encountered while trying to use an ErrorDocument to handle the request.

    Now cannot access the site. Hosting are trying to fix it. Everything is maxed out in hosting panel.

    Site is completely down. I was on it last night and noticed a few dodgy orders coming through (cc fraud I assume) started on 17th Sept. So I added those IP address to blacklist in your plugin, but having issues with website completely today.

    And in the LIVE Security Feed I noticed quite a few dodgy trying to access site, 504 etc. But I was told that is when Wordfence is doing its job and we don’t need to keep blocking IP’s separately etc.

    NOT sure what happened overnight.

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter kristinubute

    (@kristinubute)

    8 months, 2 weeks ago

    Hosting have also changed the htaccess for their testing purposes which now isn’t linked to wordfence.waf file.

    Is this going to cause extra issues?

    Plugin Support wfpeter

    (@wfpeter)

    8 months, 2 weeks ago

    Hi @kristinubute,

    The setting in Rate Limiting isn’t “full throttle”, it’s “throttle it” in reference about what to do with the human/crawler. This is generally better than “block it” because any good search engine understands what happened if it’s mistakenly blocked and your site isn’t penalized. This doesn’t cause more resources to be used.

    The Brute Force and Rate Limiting settings are documented if you need to know more about these sections.

    If auto_prepend_file in reference to wordfence-waf.php is removed, the WAF will return to “Basic Protection” and not run before the rest of your site and plugins load. You can rectify this by reoptimizing to enable “Extended Protection” again through Wordfence > Firewall > Manage WAF as you usually would after setting up the plugin.

    Thanks,
    Peter.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Rate Limiting & Advanced Blocking section’ is closed to new replies.