If WordPress says too many failed login attempts, wait about 30 minutes (or the minutes set under Bedrock Shield, Settings). That is a brute-force lockout, not a firewall block. You can also add your IP under Settings.

If WordPress shows a Bedrock Shield page that says the request was blocked, or that your IP is temporarily blocked, you can get back in from the host without waiting on support.

wp-config.php. Add define( 'BEDROCK_SHIELD_DISABLE_FIREWALL', true ); then reload. That turns the perimeter off. Sign in, confirm you can open WP-Admin, then remove the line so protection is on again. BEDROCK_SHIELD_BYPASS does the same. To allow only your current IP, use define( 'BEDROCK_SHIELD_ALLOW_IP', 'YOUR.IP.HERE' );.

Rename the plugin folder. In the host file manager or SFTP, rename wp-content/plugins/bedrock-shield to something else, for example bedrock-shield.off. WordPress stops loading it and the site comes back. Rename the folder back when you want protection on.

A signed-in administrator uploading a plugin zip from Plugins, Add New, Upload is allowed. A request to the same URL without a valid login and nonce is still blocked. You never change DNS for this. Hide the login URL or What the firewall blocks.