Title: WP AIO Security – Blocking Comments
Last modified: April 6, 2021

---

# WP AIO Security – Blocking Comments

 *  Resolved [MisterH](https://wordpress.org/support/users/hmarksthespot/)
 * (@hmarksthespot)
 * [5 years, 2 months ago](https://wordpress.org/support/topic/wp-aid-security-blocking-comments/)
 * Hi, We are having some issues with this plugin, and seems a few other people 
   online have encountered this issue. It is blocking all comments made to the website
   causing a 403 error.
 * Disabling All in one WP Security plugin -> firewall -> Forbid Proxy Comment Posting
 * Makes the 403 error go away but but causes an issue where the comment is still
   not posted and I get another error.
 * Unable to connect can’t establish a connection to the server at 127.0.0.1.
 * Can the author kindly post a solution or be able to have a look? Thanks
    -  This topic was modified 5 years, 2 months ago by [MisterH](https://wordpress.org/support/users/hmarksthespot/).

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/)
 * (@mbrsolution)
 * [5 years, 2 months ago](https://wordpress.org/support/topic/wp-aid-security-blocking-comments/#post-14285452)
 * Hi,
 * The following feature **Forbid Proxy Comment Posting** adds the code illustrated
   below.
 *     ```
       # BEGIN All In One WP Security
       #AIOWPS_FORBID_PROXY_COMMENTS_START
       <IfModule mod_rewrite.c>
       RewriteEngine On
       RewriteCond %{REQUEST_METHOD} ^POST
       RewriteCond %{HTTP:VIA} !^$ [OR]
       RewriteCond %{HTTP:FORWARDED} !^$ [OR]
       RewriteCond %{HTTP:USERAGENT_VIA} !^$ [OR]
       RewriteCond %{HTTP:X_FORWARDED_FOR} !^$ [OR]
       RewriteCond %{HTTP:X_FORWARDED_HOST} !^$ [OR]
       RewriteCond %{HTTP:PROXY_CONNECTION} !^$ [OR]
       RewriteCond %{HTTP:XPROXY_CONNECTION} !^$ [OR]
       RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
       RewriteCond %{HTTP:HTTP_CLIENT_IP} !^$
       RewriteRule wp-comments-post\.php - [F]
       </IfModule>
       #AIOWPS_FORBID_PROXY_COMMENTS_END
       # END All In One WP Security
       ```
   
 * You have to investigate what part of the code above is causing the conflict in
   your site. Once you work it out, go to the following tab Custom Rules.
 * This feature can be used to apply your own custom .htaccess rules and directives.
   It is useful for when you want to tweak our existing firewall rules or when you
   want to add your own.
 * **NOTE: This feature can only be used if your site is hosted in an apache or 
   similar web server.**
 * Let me know if the above helps you.
 * Thank you
 *  [longman2020](https://wordpress.org/support/users/longman2020/)
 * (@longman2020)
 * [5 years, 1 month ago](https://wordpress.org/support/topic/wp-aid-security-blocking-comments/#post-14410121)
 * Hi, [@hmarksthespot](https://wordpress.org/support/users/hmarksthespot/)
 * I had the same problem. It was caused by cloudflare.
    If you you use cloudflare
   or other CDNs, you must disable forbid comment proxy posting, and there is no
   other way, cause these CDNs are like a proxy.
 * Hope it helps ☺️
 *  Thread Starter [MisterH](https://wordpress.org/support/users/hmarksthespot/)
 * (@hmarksthespot)
 * [4 years, 12 months ago](https://wordpress.org/support/topic/wp-aid-security-blocking-comments/#post-14568045)
 * Hi Longman, Thanks, 🙂 I did try this following your comment but now i get a 
   127.0.0.1 ERR_CONNECTION_REFUSED.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘WP AIO Security – Blocking Comments’ is closed to new replies.

 * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256.
   png?rev=2798307)
 * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/)
 * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/)

 * 3 replies
 * 3 participants
 * Last reply from: [MisterH](https://wordpress.org/support/users/hmarksthespot/)
 * Last activity: [4 years, 12 months ago](https://wordpress.org/support/topic/wp-aid-security-blocking-comments/#post-14568045)
 * Status: resolved