How to use this plug-in in aaPanel: First download the plugin: Download Select import in the panel third-party plugin If you don't have this column now, please update to panel 6.5.1 or above. Here are some screenshots of the features:

hello, this plugin can block many request GET/POST with /?s=xxxxx (random string) in WordPress

@aaPanel_Jose CDN will be checked if a website behind a CDN like cloudflare?

kaz050457 If your site has cdn enabled, please tick here.

aaPanel_Jose hello, this plugin can block many request (spam) GET/POST with /?s=xxxxx (random string) in WordPress ? I'm getting flood that HTTP request.

jazz1611 The plugin can customize various rules, I think it can be applied to all sites, but blocking some special requests may require you to manually add rules according to the actual situation.

aaPanel_Jose after install, it show this NO, ON/OFF ?

jazz1611 Already fixed, please uninstall and re-import

Third-party plug-in for aaPanel [Nginx Free Firewall]

ViperBlood

Stealth I prefer Apache + Cloudflare

idflorin

I would love an "export/import settings" solution.

robertorubio

Stealth please show some respect for the developers efforts. I see you only complain about paid products and now you complain about free products too. You can always develop your own solution if its better 😉

robertorubio

@aaPanel_Jose thanks for the waf. Its working great on our vps and dedicated servers. It does take some adjusting with WordPress.

Jimmy

Jimmy
Any solution?

Stealth

Jimmy

For Wordpress use the free Wordfence (7/10 better than free WAF),
or the Premium nulled version (9.9/10 GOD style...).

KrzysztofMaciejewski

Stealth hahaha 🙂
nulled always wins

Jimmy

KrzysztofMaciejewski
For testing purposes is good, but for a big project is a security risk.

KrzysztofMaciejewski

Jimmy if you can read source code i think its not

but always licence buy if you earn from this 😉

Stealth

Yep, its not cheap 99 dollars/year, but secure 200 million attacks/month.
https://www.wordfence.com/help/premium/pricing/

That team know anything... And specialized for Wordpress, what use 34% sites of globe.

KrzysztofMaciejewski

Stealth i think WordFence + Hide Admin URL + Block xmlrpc and You are 99,999% safe

Jimmy

KrzysztofMaciejewski
++ CloudFlare

KrzysztofMaciejewski

Jimmy exactly!

Stealth

Jimmy
Yep, I use on 90% of my sites hosted Cloudflare.
Only that users not use who have Wildcard SSL and one page who hosting videos. CF is limiting 100MB file upload on Free Package.

idflorin

Stealth Off-topic: I had a relatively large website(3000 pages + 1000 visitors/day) and Cloudflare forced me to upgrade. I gave up Cloudflare. This was 4 years ago. Now, do you have something similar or bigger running free Cloudflare? I mean, do you know some limits for the free Cloudflare?

KrzysztofMaciejewski

idflorin
Free Plan for personal websites and blogs

$ 0/ mo
Unmetered Mitigation of DDoS
Global CDN
Shared SSL certificate
3 page rules

We offer a Free plan for small personal websites, blogs, and anyone who wants to evaluate Cloudflare.
Our mission is to build a better Internet. We believe every website should have free access to foundational security and performance. Cloudflare's Free plan has no limit on the amount of bandwidth your visitors use or websites you add.

If you want to make your site even faster and more resilient, you can easily upgrade to one of our higher tier plans.

idflorin

KrzysztofMaciejewski I guess my site was not personal (https://www.adruby.com) enough in their opinion. But I was built and maintained by me and only me. I'll give it a try again.

KrzysztofMaciejewski

idflorin very fast website. what technology You used?

idflorin

KrzysztofMaciejewski it's a drupal 7 + Redis cache.

KrzysztofMaciejewski

idflorin nice. on nginx server i see

« Previous Page Next Page »