Q: How to whitelist a REST API route from the local firewall?
Hello,
I'm a PRO user with 5 licenses. Your plugin blocks API requests from the AppSumo tool Videotoblog.ai. The only way it works is by completely deactivating Security Ninja.
I have confirmed the block comes from the local firewall ("Block Suspicious Requests"), NOT from the Cloud Firewall.
Videotoblog's support says I need to whitelist the API route wp-json/wp/v2/posts.
My question is: How can I add this specific route to the local firewall's exclusion list?
I can't find a URL exclusion option in the UI, IP whitelisting is not possible (they use dynamic IPs), and the Event Log does not have an "allow" feature for these blocks.
Your help is appreciated.
Lars_Koudal
Jul 12, 2025A: Thanks so much for reaching out and for being a PRO user! We're sorry to hear you're running into trouble with Videotoblog.ai, but the good news is that Security Ninja gives you the flexibility to fine-tune your firewall for exactly these situations.
Here's how you can whitelist a specific REST API route without turning off the entire firewall:
- Go to the "Events" tab in Security Ninja and locate one of the blocked requests from Videotoblog.ai.
- Click the "Details" tab for that event. What we're looking for is the specific "rule" that was triggered and caused the block.
- Once you know which rule is responsible, you can use a custom code snippet to allow just that traffic, while keeping all other protections in place.
We have a detailed guide and code examples here: https://wpsecurityninja.com/docs/filters-hooks/customizing-firewall-filter-rules/
In a recent update, we made it even easier by giving each rule a unique name, so you can target exactly the one you want to adjust.
If you need help setting up the snippet, just email us at support@wpsecurityninja.com with the name of the rule, and we'll be happy to help you get it working for your site.
You can also turn off the "Block Suspicious Requests" option entirely, but we recommend just disabling the specific rule that's causing issues. This way, you keep your site protected while letting Videotoblog.ai work as intended.
We have plans to make a nice interface for the firewall rules that would allow to easily customize and tweak the firewall rules, but that is scheduled for a later release.
Let us know if you need any more help.