內容簡介
Deny All Firewall（拒絕所有防火牆）
此外掛會檢查您的 WordPress 安裝狀況，並將規則注入 .htaccess 檔案中，以完全阻擋除了正式網站內容以外的所有訪問。
這樣做可以減少伺服器負載，防止駭客掃描您的網站以尋找漏洞，甚至還可以減少您的網站碳足跡！我們估計此外掛每年可以減少平均 WordPress 網站使用的 100 公斤二氧化碳，相當於從倫敦到伊比薩的航班的碳足跡！
已封鎖的請求可以被記錄下來並加入白名單，以調整防火牆以符合您的特定網站。
白名單中的請求可以被 301 重定向到另一個網址。
此外掛會監視內容變更，若偵測到變更且規則需要更新，會提醒使用者。
此外掛有一個「鎖定」功能，可以阻擋所有具 Query Strings 或 POST 資料的請求。這是實現 SQL / PHP 注入、XSS 和其他攻擊的方式，但某些佈景主題和外掛也是通過此方式與您的伺服器溝通，因此可能需要為您的網站加入一些請求至白名單中。
此外掛有一個「網站地圖」功能，可以自動生成 XML 網站地圖，並透過 robots.txt 檔案讓搜尋引擎找到。此網站地圖比 WordPress 自動生成的網站地圖更詳細。
此外掛有一個「允許所有內容」功能，適用於內容過於繁多而無法列入 .htaccess 檔案的網站。
此外掛有一個「允許所有 IP 位址」功能，適用於有太多使用者而無法列出其所有 IP 位址在 .htaccess 檔案中的網站。
此外掛有一個「強制 SSL」功能，適用於擁有 SSL 憑證的網站，以強制訪客使用 HTTPS 而非 HTTP。
可防止在 <head> 和 /feed/ meta 中顯示 WordPress 版本。
目前此外掛僅支援 Apache 伺服器，但未來也會考慮加入 Nginx 支援。
如有任何被此外掛誤封的訪問，請立即透過支援論壇與我們聯繫！
外掛標籤
開發者團隊
📦 歷史版本下載
原文外掛簡介
Deny All Firewall
This plugin examines your WordPress installation and injects rules into your .htaccess file which completely block access to everything except genuine site content.
Doing so reduces load on your server, prevents hackers from scanning your site for exploits and even reduces the carbon footprint of your site! We estimate that this plugin will reduce the amount of CO2 used by an average WordPress site by 100Kg per year which is equivalent to the carbon footprint of a flight from London to Ibiza!
Blocked requests can be logged and whitelisted to fine tune your firewall to your specific website.
Whitelisted requests can be 301 redirected to another web address.
The plugin monitors for content changes and will alert users if changes are detected and rules need to be refreshed.
There is a “Lock Down” feature which blocks all requests with Query Strings or POST data. This is how SQL / PHP injection, XSS and other attacks are implemented but it is also how some themes and plugins talk to your server so may require some requests to be whitelisted for your site.
There is a “Sitemap” feature which autmatically generates an XML sitemap and lets search engines find it through a robots.txt file. This sitemap is more detailed than the one automatically generated by WordPress.
There is an “Allow All Content” feature for sites with way too much content to list in the .htaccess file.
There is an “Allow All IPs” feature for sites with too many users to list all their IP addresses in the .htaccess file.
There is a “Force SSL” feature for sites with an SSL certificate to force visitors to use HTTPS rather than HTTP.
Prevents WordPress version from being shown in and /feed/ meta.
Currently we only support Apache servers but will be looking to include Nginx in the future.
Please contact us through the support forum to let us know immediately if the plugin blocks anything that it shouldn’t do!