Trying to resolve the website error ‘Access Denied by Sucuri Website Firewall’? We can help you with it.

The Sucuri Firewall is a cloud-based web application firewall. It blocks any hack or attack attempts on the website instantly.

At Bobcares, we often get requests from our customers to fix this error as a part of our Server Management Services.

Today, let’ see how our Support Engineers fix this error.

Why does ‘Access Denied – Sucuri Website Firewall’ error occur?

Sucuri Firewall is one of the best Web Application Firewall. Moreover, it works well in protecting WordPress websites in the server.

Also, it protects the website from external attacks keeping it safe.

However, if the website blocks the Sucuri IP addresses unknowingly, then access denied errors show up on the website.

For instance, the error message appears as shown below.

How we fix Sucuri error easily?

At Bobcares, where we have more than a decade of expertise in managing servers, we see many customers facing problems with Sucuri.

Now, let’s see how our Support Engineers fix this error.

Recently, one of our customers approached us with the error ‘Access Denied – Sucuri Website Firewall‘. He received this error while accessing his website.

On checking, we found that the user had a Sucuri firewall set on his WordPress. And this was blocking its own IP address. Thus it was displaying access denied error on the website.

So, we whitelisted the Sucuri IP addresses by adding them to the .htaccess file.

Here is the code that we used in the .htaccess file.

<FilesMatch ".*">
Order deny,allow
Deny from all
Allow from 192.88.134.0/23
Allow from 185.93.228.0/22
Allow from 66.248.200.0/22
Allow from 208.109.0.0/22
Allow from 2a02:fe80::/29
</FilesMatch>

Whitelisting with IPtables

In addition, we also whitelist the IP addresses in the server according to the firewall used. In case, if we are using IPTables, then we will whitelist the IP addresses of Sucuri in IPTables firewall.

For example, we assisted to whitelist the range of IP addresses in IPTables as follows.

Initially, we logged into the server via SSH.

Thereafter, we allowed incoming connections from 192.88.134.0/23

iptables -A INPUT -i eth1 -s 192.88.134.0/23 -j ACCEPT

Then allowed outgoing connections to 192.88.134.0/23

iptables -A OUTPUT -i eth1 -d 192.88.134.0/23 -j ACCEPT

Thus, we whitelisted the range of IP addresses. Finally, the Sucuri error was resolved.

[Need any assistance in fixing Sucuri related errors? – We’ll help you]

Conclusion

In short, the website shows the ‘Access Denied – Sucuri Website Firewall’ message when the Sucuri IP addresses are blocked in the server. Today, we saw how our Support Engineers fixed this error by whitelisting the Sucuri IP addresses.