Managed Plugin Updates: Issues which may prevent updates from running

Managed Plugin Updates is generally able to update any plugin on your site. However, there are a few situations where MPU may be prevented from completing updates. Read below to understand common issues and how to solve them.

Blocked by firewall

If requests to update your website from Managed Plugin Updates are denied by a WAF (web application firewall), you may need to modify the WAF’s allowed list to ensure Flywheel’s AI tools can access your site.

Request info

Requests will contain the header named autoupdater and originate from one or more of the following IP addresses:

35.186.183.60
35.221.41.251
35.236.216.128
35.245.159.253
35.245.210.234
35.245.251.214
35.245.50.252

Allowing access to Wordfence’s WAF

1. From your WP Admin area, go to Wordfence > Firewall and click All Firewall Options.
2. Next, expand Advanced Firewall Options and enter the MPU IP addresses into the “Allowlisted IP addresses that bypass all rules”.
3. Save your changes and you’re done!

Configuring IP Access Rules for Cloudflare

To create an IP Access Rule, follow these steps:

1. Log in to your Cloudflare dashboard and select your account and website.
2. Navigate to Security > WAF > Tools
3. Add the following IP addresses under IP Access Rules to the IP, IP range, country name, or ASN:
   1. 35.186.183.60
   2. 35.221.41.251
   3. 35.236.216.128
   4. 35.245.159.253
   5. 35.245.210.234
   6. 35.245.251.214
   7. 35.245.50.252
4. Under each for Action select Allow
5. Click Add

If you need additional help from Cloudflare you follow this link for community support!

The site requires a login

If your site requires a login (such as internal pages like an Intranet), our software won’t be able to complete updates for your site. Our visual regression tool requires access to the front-end of the site and having a login will cause this to fail.

In these circumstances, we recommend unenrolling the site from Managed Plugin Updates in the Flywheel app.

Privacy Mode

Sites with Privacy Mode enabled will not update because the updater needs access to a live site. If your site is in Privacy Mode, you’ll see a notification banner at the top of the plugins page.

Caching Services

To ensure maintenance mode can enable and disable correctly, Managed Plugin Updates should be allowed in any additional caching layers (Sucuri, WP Optimize plugin, NitroPack, Cloudflare, etc).

NitroPack

If your website is utilizing the NitroPack optimization plugin you will need to exclude a cookie to prevent any interruption in our update services.

Cookie name: autoupdater

Cookie value: 1

Learn how to exclude a cookie in NitroPack.

Sucuri

• Set the “Cache Level” option in Sucuri to “Site caching”. Learn more from Sucuri here.
• Add MPU IP addresses to the allowed list under the Whitelist IP Addresses section in the Sucuri dashboard. Learn more from Sucuri here.

Cloudflare

Ensure the MPU IP addresses are whitelisted in Cloudflare. Learn more here.

CleanTalk plugin

The CleanTalk plugin can block Flywheel’s AI tools. To ensure access, please complete the following:

1. Allow Flywheel’s IP addresses in your firewall.
2. Adjust the following settings from the site’s WP Admin area under CleanTalk > Advanced Settings.
   • Turn off the Anti-Crawler feature.
   • Adjust the Anti-Flood count to 20 pages. (Cleantalk assumes Flywheel’s AI tools are a bot because it opens 20 pages in under a minute to take before and after screenshots as part of Visual Regression Testing.)
   • Turn off Check all posts data.

Need help?

If you have any questions our Happiness Engineers are here to help!