WooCommerce PayPal ...
Clear all

[Solved] WooCommerce PayPal IPN failing!  


Joined: 6 years ago
Posts: 210
06/06/2019 12:30 pm  

I recently got this warning email from PayPal about Instant Payment Notifications (IPN). 

Hello Tharindu Kumara ,

Please check your server that handles PayPal Instant Payment Notifications (IPN). IPNs sent to the following URL(s) are failing:


If you do not recognize this URL, you may be using a service provider that is using IPN on your behalf. Please contact your service provider with the above information. If this problem continues, IPNs may be disabled for your account.

Thank you for your prompt attention to this issue.



Turns out my firewall was blocking requests from PayPal IPN. I'm using Naxsi WAF to protect my server. I had to create whitelist rules for PayPal IPN since they were not included in community contributed whitelist rules for WordPress. I'm posting Whitelist rules here in case someone else need them.

BasicRule wl:1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:payment_date";
BasicRule wl:1001,1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:custom";
BasicRule wl:1010,1011,1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:transaction_subject";
BasicRule wl:1000,1010,1011,1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:item_name";
BasicRule wl:1000,1010,1011,1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR_X:item_name[0-9]+$";
BasicRule wl:1200,1002 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:verify_sign";
BasicRule wl:1015 "mz:$URL:/wc-api/WC_Gateway_Paypal/|$BODY_VAR:subscr_date";

These rules work for WooCommerce and WooCommerce Subscriptions. You can find more information about how to use these whitelist rules on Analyze Naxsi logs & Create Whitelist Rules with nxutil.

This topic was modified 12 months ago by Tharindu

Become a vpsfix.com affiliate and earn up to 10% commissions from your referrals

Back to top button

We use cookies to give you the best online experience. By agreeing you accept the use of cookies in accordance with our cookie policy.