How to block web vulnerability scanners with iptables.
We are often asked how to block the DFind vulnerability scanner (A.K.A. “w00tw00t.at.ISC.SANS.DFind”) with NinjaFirewall, our Web Application Firewall for PHP and WordPress. The bad news…
Category: Security
Jetpack Protect: IP spoofing and improper data validation allow security feature bypass.
Since version 3.4, the popular Jetpack by WordPress.com plugin (15+ million downloads / 1+ million active installs) includes Jetpack Protect, a module “to protect your Jetpack-connected…
NinjaFirewall WP/WP+ introduces automatic updates for security rules.
Starting from WP v1.4 and WP+ v1.2, NinjaFirewall introduces a new feature: It offers the possibility to automatically update the firewall security rules. Each time a new vulnerability…
Testing NinjaFirewall without blocking your visitors.
NinjaFirewall is a powerful web application firewall. When implemented in a production environment, it does not take more than a few hours before its log starts…
Troubleshooting NinjaFirewall installation problems.
Failed installation This is the most common problem experienced by some users. At the end of the installation process, it displays the Error: the firewall is not…