Title: Techbox Firewall Author: techboxdesign Published: 2026 年 8 月 14 日 Last modified: 2026 年 9 月 13 日 --- 搜尋外掛 ![](https://s.w.org/plugins/geopattern-icon/techbox-firewall.svg) # Techbox Firewall 由 [techboxdesign](https://profiles.wordpress.org/techboxdesign/) 開發 [下載](https://downloads.wordpress.org/plugin/techbox-firewall.1.3.1.zip) * [詳細資料](https://tw.wordpress.org/plugins/techbox-firewall/#description) * [使用者評論](https://tw.wordpress.org/plugins/techbox-firewall/#reviews) * [安裝方式](https://tw.wordpress.org/plugins/techbox-firewall/#installation) * [開發資訊](https://tw.wordpress.org/plugins/techbox-firewall/#developers) [技術支援](https://wordpress.org/support/plugin/techbox-firewall/) ## 外掛說明 Techbox Firewall is a fast, lightweight Web Application Firewall (WAF) for WordPress. It inspects every request and blocks common attacks — SQL injection, cross-site scripting (XSS), remote code execution, directory traversal, malicious bots, and bad requests. Techbox Firewall is part of the **Techbox Shield** family and is designed to pair with [Techbox Login Security](https://wordpress.org/plugins/techbox-login-security/) for complete front-door protection: the firewall stops malicious requests, while Login Security guards the login itself. #### What you get * **WordPress-layer WAF** — loads early and screens every request, on any host, no `.htaccess` or server changes required. * **Core attack rules** — SQL injection, XSS, RCE, LFI/RFI, path traversal, malicious user-agents and bad bots, and anomalous requests. * **Signed rule updates** — optional (off by default); enable weekly or daily when you want fresher rules, verified before apply. * **Learning mode** — on by default so you can watch and log before you enforce. * **IP allow / block lists** — block known-bad addresses and allow-list your own office or VPN. * **Activity log** — see exactly what was blocked and why, with a clean, plain- English record. * **Safe-mode recovery** — a built-in way back if a rule or setting ever gets in your way. #### Built for real people, not just developers Security software is often written for experts. Techbox Firewall is different: smart defaults, plain-English settings, and a clear view of what it is blocking — so first-time site owners and seasoned agencies both feel at home. ### Privacy Firewall logs, IP lists, and settings stay on your WordPress site. Logs may include IP addresses, request paths, and matched rule IDs so you can audit blocks — remove or restrict access if your policies require it. Our website Privacy Policy: https://techboxdesign.com/privacy-policy/ ### External services This plugin can optionally download fresher attack-detection signatures from a feed service operated by Techbox Design. It is off on a fresh install and stays off until you switch it on. * **Service:** `https://feeds.techboxdesign.com/firewall/v1/` — a JSON signature document plus a detached signature file. * **When:** Only after an administrator turns on **Allow this site to contact the Techbox signature feed under Firewall Rule updates. With that off, the plugin makes no request to the service at all, from any trigger. With it on, you choose between manual checks only, weekly, or daily. * **Data sent:** An ordinary HTTPS GET via the WordPress HTTP API. No account, no licence key, and no visitor personal data. * **What comes back:** Detection signature _data_ — a match expression per entry, plus a category, a score, and which parts of a request to inspect. Every field is validated against an allow-list and the document’s signature is verified before anything is stored. Nothing downloaded is executed, evaluated, included, or unserialised, and no plugin, theme, or add-on is installed or updated by this service. Plugin updates come from WordPress.org only. * **If it is unavailable:** The signatures bundled with the plugin are always active, so protection does not depend on this service being reachable or enabled. * **Terms of Use:** https://techboxdesign.com/terms-and-conditions/ (see “Optional signed rule feed”) * **Privacy Policy:** https://techboxdesign.com/privacy-policy/ You can withdraw permission at any time; doing so also cancels any schedule. ### Third-party notices This plugin may receive **translated derivatives** of the [OWASP Core Rule Set](https://coreruleset.org/) ( Apache License 2.0) through its signed rule feed. Upstream project: https://github. com/coreruleset/coreruleset — copyright CRS project contributors; see the upstream LICENSE for the full Apache License 2.0 text. We do not embed ModSecurity; only portable signatures are translated into Techbox’s JSON rule format and delivered via the signed feed. ## 安裝方式 1. Upload the plugin to `/wp-content/plugins/` or install it from the Plugins screen in WordPress. 2. Activate **Techbox Firewall** through the _Plugins_ menu. 3. Open **Techbox Firewall** in the admin sidebar. Screening starts in **Monitor** mode on the **Basic** protection level — requests are logged, not blocked, until you switch to Enforce. 4. Allow-list your IP under IP Access, review the Logs, then turn on **Enforce** when ready. ## 常見問題集 ### Will this break my site or block real visitors? Techbox Firewall ships with conservative defaults and a **learning mode** so you can review what it would block before it enforces anything. If a rule ever gets in your way, a **safe-mode recovery** option and per-rule controls let you fix it quickly. ### Does it work on any host? Yes. Techbox Firewall runs inside WordPress (no `.htaccess` or server configuration needed), so it works on shared, managed, and VPS hosting alike. ### Do I still need a login security plugin? A firewall and login protection solve different problems. Techbox Firewall blocks malicious requests; [Techbox Login Security](https://wordpress.org/plugins/techbox-login-security/) protects the login itself (limit login attempts, lockouts, activity logging). They are designed to work together. ## 使用者評論 這個外掛目前沒有任何使用者評論。 ## 參與者及開發者 以下人員參與了開源軟體〈Techbox Firewall〉的開發相關工作。 參與者 * [ techboxdesign ](https://profiles.wordpress.org/techboxdesign/) [將〈Techbox Firewall〉外掛本地化為台灣繁體中文版](https://translate.wordpress.org/projects/wp-plugins/techbox-firewall) ### 對開發相關資訊感興趣？ 任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/techbox-firewall/)、 查看 [SVN 存放庫](https://plugins.svn.wordpress.org/techbox-firewall/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/techbox-firewall/?limit=100&mode=stop_on_copy&format=rss) 訂閱[開發記錄](https://plugins.trac.wordpress.org/log/techbox-firewall/)。 ## 變更記錄 #### 1.3.1 * Dashboard counters now label themselves with the selected time period instead of always reading “All time”. #### 1.3.0 * Firewall settings reorganized into clearer tabs, so related options now sit together and each screen has one job. Links and bookmarks to the previous layout still land in the right place. * Reliability fix: the site’s own scheduled background tasks can no longer trip the request-rate protection. * Admin copy improvements. #### 1.2.0 * New Security response headers section: optional clickjacking, MIME-sniffing and HTTPS-transport headers for front-end responses, plus a report-only content policy for auditing. Headers your server already sends are left untouched. * Request screening can now inspect JSON and raw request bodies and request headers, and can optionally screen anonymous visitor AJAX requests (monitored first by default). * New scoring detection option: act only when several rules agree, which reduces false positives on unusual but legitimate traffic. The existing first-match behaviour stays the default. * Block response option to serve a generic page without identifying details. * Security rules can be scoped to specific installed plugin or theme versions, so a protection applies only where the affected software is actually present. The list of installed software is read locally and never leaves the site. * Faster request-rate counting on busy sites where the server provides in-memory caching. * Extension framework updates for companion Techbox plugins, including custom responses and shared dashboard data. * Admin copy and dashboard improvements. #### 1.1.0 * Extension framework: companion Techbox plugins can now add their own protection features and settings to the Firewall screens. * The Logs screen can show visitor country details when a companion plugin provides them. * Enabling the optional rule feed is now a clearer, deliberate choice. * Reliability fixes for pages shown when a request is blocked before WordPress fully loads. * Admin copy improvements. #### 1.0.3 * Log retention now keeps events for the full 1–365 days offered in settings. * Choose which header carries the visitor IP behind a proxy or CDN, or leave it on automatic detection. * The optional rule feed now asks before its first check and names the service it contacts. * The IP block list explains what it does in the firewall mode you are actually running. * Security and reliability hardening. * Compatibility fixes for recent WordPress releases. #### 1.0.2 * Harden admin output escaping. #### 1.0.1 * Document Privacy Policy and Terms links for the optional signed rule feed. * Point Plugin URI at the WordPress.org listing and trim outbound marketing links. #### 1.0.0 * First public release: WordPress-layer WAF with Basic / Balanced / Strict levels. * Ships in Monitor mode on Basic by default; switch to Enforce when ready. * Optional signed rule feed (off by default; weekly or daily when enabled), seed fallback, IP lists, logs, and safe-mode recovery. ## 中繼資料 * 版本 **1.3.1** * 最後更新 **1 週前** * 啟用安裝數 **少於 10 次** * WordPress 版本需求 ** 6.2 或更新版本 ** * 已測試相容的 WordPress 版本 **7.1.1** * PHP 版本需求 ** 7.4 或更新版本 ** * 語言 * [English (US)](https://wordpress.org/plugins/techbox-firewall/) * 標籤: * [bot protection](https://tw.wordpress.org/plugins/tags/bot-protection/)[firewall](https://tw.wordpress.org/plugins/tags/firewall/) [malware](https://tw.wordpress.org/plugins/tags/malware/)[WAF](https://tw.wordpress.org/plugins/tags/waf/) [web application firewall](https://tw.wordpress.org/plugins/tags/web-application-firewall/) * [進階檢視](https://tw.wordpress.org/plugins/techbox-firewall/advanced/) ## 評分 這個項目尚無任何評論記錄。 [撰寫評分](https://wordpress.org/support/plugin/techbox-firewall/reviews/#new-post) [查看全部使用者評論](https://wordpress.org/support/plugin/techbox-firewall/reviews/) ## 參與者 * [ techboxdesign ](https://profiles.wordpress.org/techboxdesign/) ## 技術支援 使用者可在技術支援論壇提出意見反應或使用問題。 [檢視技術支援論壇](https://wordpress.org/support/plugin/techbox-firewall/)