Wordfence Blocking Email

  • rwathome

    (@rwathome)


    9 years, 3 months ago

    Hopefully this will be simple!

    I am new to WordPress and to Wordfence

    The situation is this:
    I’m using a basic WP installation (4.7.3) with Wordfence (6.3.0) hosted on a VPS. My local system is Vista/Firefox.

    – When I use the WP contact form, email is blocked when Wordfence is activated
    – When I use the WP contact form, email works when Wordfence is DEACTIVATED
    – I also note no “Email Sent!” message from the contact form when Wordfence is activated.

    I have deactivated ALL plugins with the exception of Wordfence and still have the issue.

    I appreciate any help/direction!
    Thank you

Viewing 5 replies - 1 through 5 (of 5 total)
  • wfalaa

    (@wfalaa)

    9 years, 3 months ago

    Hi,
    What is the firewall status under (Wordfence > Firewall)?

    Try to send an email using the contact form then check “Live Traffic” for any blocked requests. (hint: you can filter the live traffic log by “Blocked By Firewall”).

    P.S. It’s recommended to upgrade your themes/plugins to the latest stable version “including Wordfence”, so please upgrade the plugin to version 6.2.3.

    Thanks.

    Thread Starter rwathome

    (@rwathome)

    9 years, 3 months ago

    Good Morning!

    Firewall status is “Enabled and Protecting”
    WF auto updated to 6.3.2

    All plugins are current released version.

    The following was blocked:

    admin in United States XXXXXXXXXXXXX, United States left http://www.tgino.bslcore.com/home/contact/ and was blocked by firewall for LFI: Local File Inclusion in POST body: _wp_http_referer=%2Fhome%2Fcontact%2F at http://www.tgino.bslcore.com/wp-admin/admin-ajax.php
    3/7/2017 10:29:33 AM (58 seconds ago) IP: xx.xx.xx.xx [block] Hostname: xxx-457d6045.dyn.xxxxxxxxxxxxx
    Browser: Firefox version 0.0 running on WinVista
    Mozilla/5.0 (Windows NT 6.0; rv:51.0) Gecko/20100101 Firefox/51.0

    Thanks!

    wfalaa

    (@wfalaa)

    9 years, 3 months ago

    Please choose “Learning Mode” for “Firewall Status” under (Wordfence > Firewall) then try sending an email from this form and the Firewall will learn to whitelist this action in the future, after that you can revert the Firewall Status back to “Enabled and Protecting”.

    Thanks.

    Thread Starter rwathome

    (@rwathome)

    9 years, 3 months ago

    This worked perfectly. Could I have white-listed the the URL to the admin-ajax.php file as well?

    Thank you very Much!

    wfalaa

    (@wfalaa)

    9 years, 3 months ago

    No, because this file “admin-ajax.php” can be used by so many different plugins/themes and it could be targeted by attackers as well, so globally whitelisting it isn’t a good idea, only whitelisting specific parameters is recommended.

    Thanks.

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Wordfence Blocking Email’ is closed to new replies.