Firewall and PayPal IPN question

I searched for "PayPal" but didn't find anything, so I'm making a new post. Would the SCP firewall block PayPal IPN notifications? One of my client sites suddenly stopped receiving the notices. I don't recall seeing anything in the log. Just trying to eliminate that as a possible cause. I'll run another test and check the log again.

Hi Bruce,

The firewall could block Paypal if its IP addresses are (geo)blocked or there is a false positive. In the second case you should see a log entry in Securitycheck Pro everytime this happens, and it's usually solved enabling the 'Easy config' feature (I always recommend to enable this option on ecommerce websites). In the first case you will not see anything in logs unless you enable it into WAF configuration -> Logs tab (Enable "Add Geoblock logs" and "Add access attempts").

Regards,
Jose

Hola Jose,
This PayPal IPN issue is coming up again. I don't remember if it's the same site or not. It is concerning an RSForm Pro Donation form. The component isn't logging the IPN notices. When I disable SCP the notices come in (and the customized SCP htaccess file is still live). I whitelisted the following PayPal IPN IP addresses from a post about Joom Donation IPN in this forum which had this link: www.paypal.com/us/smarthelp/article/what...aypal-servers-ts1056 - but it didn't solve it.
64.4.248.8
64.4.249.8
66.211.169.17
173.0.84.40
173.0.84.8
173.0.88.40
173.0.88.8
173.0.92.8
173.0.93.8

I changed to Easy Config but it didn't solve the problem. I disabled Global Configuration/Tuning Tab/Determine Option Accurately but no joy. There are no log entries in the SCP Firewall log. I checked the Joomla log and only a log entry for the successful test when SCP was disabled, but no entries for the failed tests when I re-enabled SCP. Do you have any thoughts/suggestions as to how to resolve this problem?
Thanks

Hi azurelink,

Did you follow my advice of the previous entry to enable logging of blocked IPs? I think this could be the root cause and enabling that option will allow you to check if any IP is blocked and unblock it.

Regards,
Jose

Thanks Jose!
Enabling Add Access Attempts resulted in two new entries from PayPal. I added them to the Whitelist and the IPN notice came through fine. Can I add an IP address range in SCP?

Glad to hear you sorted it out! 

To add a range just use code notation or the old style ( 192.168.*.* ).

Regards,
Jose