Access Denied – Sucuri Website Firewall error : How we resolve?
Trying to fix the ‘Access Denied by Sucuri Website Firewall’ website error? We can assist you with this.
Sucuri Firewall is a web application firewall that is hosted in the cloud. Any attempt at a hack or an assault on the website is immediately blocked.
As part of our Server Management Services, Bobcares frequently receives requests from clients to address this problem.
Let’s take a look at how our Support Engineers are resolving this issue today.
What causes the error ‘Access Denied – Sucuri Website Firewall’?
Sucuri Firewall is one of the most effective Web Application Firewalls on the market. It also does a good job of securing WordPress websites on the host.
It also keeps the website safe by protecting it from external threats.
Access refused errors appear on the website if the website blocks the Sucuri IP addresses unintentionally.
The error message, for example, displays as seen below.
How can we quickly resolve a Sucuri error?
We see many customers having issues with Sucuri at Bobcares, where we have more than a decade of experience maintaining servers.
Let’s see how our Support Engineers resolve this issue.
The issue ‘Access Denied – Sucuri Website Firewall’ was just brought to our attention by one of our customers. When he tried to browse his website, he got this error.
After further investigation, we discovered that the user’s WordPress was protected by the Sucuri firewall. And it was banning its own IP address as a result of this. As a result, the website displayed an access refused error.
As a result, we whitelisted the Sucuri IP addresses in the.htaccess file.
The code we used in the.htaccess file is shown below.
<FilesMatch ".*">
Order deny,allow
Deny from all
Allow from 192.88.134.0/23
Allow from 185.93.228.0/22
Allow from 66.248.200.0/22
Allow from 208.109.0.0/22
Allow from 2a02:fe80::/29
</FilesMatch>Using IPtables for whitelisting
In addition, we whitelist IP addresses on the server based on the firewall configuration. If we are using IPTables, we will whitelist Sucuri’s IP addresses in the IPTables firewall.
For example, we helped whitelist the following IP address range in IPTables.
iptables -A INPUT -i eth1 -s 192.88.134.0/23 -j ACCEPTInitially, we used SSH to connect to the server.
iptables -A OUTPUT -i eth1 -d 192.88.134.0/23 -j ACCEPTFollowing that, incoming connections from 192.88.134.0/23 were allowed.
Conclusion
When the Sucuri IP addresses are blocked in the server, the website displays the ‘Access Denied – Sucuri Website Firewall’ notice. Today, we watched how our Support Engineers were able to resolve this issue by whitelisting Sucuri IP addresses.
