Exceptions
By default, a firewall blocks all network traffic coming in to the network it is protecting. RSFirewall! exceptions are tightly regulated to protect the WordPress CMS. Every exception is a potential security vulnerability so we limit them to only those that are absolutely needed.
You can start by clicking on the "New" button to add an exception. When adding a new exception you have the following configurable options:
- Exception type, which has 2 options:
- User Agent will match either the exact client User Agent or a part of it (if regular expressions are used)
- URL will match the URL or parts of the URL (if regular expressions are used)
- Use regular expressions, they can be used to match an exception eg. utm_source=(.*?). If set to No, the exception will match the string given here by using a simple string comparison so please make sure to add the full string you are expecting;
- Match, here you can specify either the full string to match or a regular expression (if regular expressions are used);
- Skip PHP Protections, if set to Yes will skip the PHP protections;
- Skip SQL Protections, if set to Yes will skip the SQL protections;
- Skip JS Protections, if set to Yes will skip the JavaScript protections;
- Skip Upload Protections, if set to Yes will skip the upload protections;
- Reason, this is only for internal use, it is not displayed anywhere on your website;
- Published, used to enable or disable the exception.