Under firewall settings page I see this.
Brut Force Protection – Your Server could not start a Session!
Anyone know how to fix this please?
Thanks
Also I think this may be related to the same issue, in Ithemes security check I see Invalid IP returned: **example*ip**
Yes, If your server cannot start a persistent session the Brute-Force Login Protection will not work for you (and other things that require and active session may not work either).
There are many reasons that your server is not able to start a session. You need to ask you hosting provider to look into it and let you know why sessions are not working. Also ask them if mod_rewrite is installed and make sure that you can use rewrite rules in your .htaccess file.
Thank you, I have resolved the issue but not 100% certain of the cause. I think it was because my site was recently moved to a new server, I replaced the .htaccess file with a clean one and the issue seems to be resolved as brute force now enables!
Satying this the Ithemes securtiy check is still throwing an Invalid IP response though so something still isnt right. Loopback is working and also mod_rewrite.
Anyway thank you for your time and for providing a great plugin!