Plesk 12.x / Linux :: Copy Firewall Rules From One Server To Another
Oct 3, 2014Plesk 12.x
CentOS 6.5
Any method for copying the Firewall (extension) rules from one server to another.
Plesk 12.x
CentOS 6.5
Any method for copying the Firewall (extension) rules from one server to another.
Applying Plesk firewall changes? I make my change, apply and get to:
Status: Applying in progress. If your browser shows connection error messages, or if this screen does not disappear in more than 30 seconds, go to previous page.
And there things stay. Going back to look at the firewall I can see the change haven't been applied, and going to apply just results in the same. No error, just no anything. It also took numerous attempts to get firewall modification to be swtich on although finally at about the eighth attempt changes were enabled. Only now I can't apply them ...
I am using the plesk firewall and trying to set up SSH rule which only allows from my IP but deny from everywhere else. In previous versions this worked fine by adding an ip selecting Allow from selected sources, deny from others and the icon in the rules would be orange with the lines
allow incoming from xxx.xxx.xxx.xx
Deny incoming from all others
However this no longer works as the deny from all others is not appearing and is not being generated in the iptables by plesk.
I just have installed plesk panel and when i get to the "Firewall" tool, then clicked on "Enable Firewall Rules Management", proftpd has stopped working properly.URLs....I have preinstalled the server 2 times, and every time i try to edit the firewall rules, proftpd got broken.
View 10 Replies View RelatedI would like to know if is possible to export Plesk firewall rules from Plesk 9.5.4 to Plesk 11.5.30 with panel.
View 2 Replies View RelatedIm actually under ddos attack.
I'll be life long grateful is some one can tell me how to allow only my IP address to access the whole vps server, to add ddos protection on it in the end.
I already try, but i'm a dummy already on linux interface.
Since the update I have a problem with my Firewall. I need to set "Allow all incoming connections" under "Server => Firewall" in order to connect over FTP with TLS (explicit). This was working before the update without allowing all incoming connections. How to fix this in the Plesk panel?
View 2 Replies View RelatedI am having trouble connecting to my ssh server. It responds with a lengthy error message about no network etc. but it is the last message that concerns me:
Sometimes, such troubles can be caused by a misconfigured firewall.
How can I check the firewall if I cannot connect to ssh? I am running plesk 11.5 control panel and CentOS 6. Is this something I can do from plesk?
I can see that the firewall in plesk is set to allow all for ssh, but I cannot see way to disable the firewall to test ssh connection. Can this be done from plesk?
i want removed all ip that are in firewall rules in csf/cpanel
Chain SPAMHAUS (1 references)
num pkts bytes target prot opt in out source destination
1 0 0 DROP all -- * * 91.146.64.0/18 0.0.0.0/0
2 0 0 DROP all -- * * 91.146.112.0/20 0.0.0.0/0
3 0 0 DROP all -- * * 89.35.0.0/23 0.0.0.0/0
4 0 0 DROP all -- * * 89.32.203.0/24 0.0.0.0/0
5 0 0 DROP all -- * * 89.233.64.0/18 0.0.0.0/0
6 0 0 DROP all -- * * 89.208.122.0/23 0.0.0.0/0
7 0 0 DROP all -- * * 89.187.192.0/19 0.0.0.0/0
8 0 0 DROP all -- * * 89.145.128.0/20 0.0.0.0/0
9 0 0 DROP all -- * * 88.206.80.0/20 0.0.0.0/0
10 0 0 DROP all -- * * 88.206.8.0/21 0.0.0.0/0
11 0 0 DROP all -- * * 88.206.64.0/20 0.0.0.0/0
12 0 0 DROP all -- * * 88.206.0.0/17 0.0.0.0/0
13 0 0 DROP all -- * * 88.206.0.0/21 0.0.0.0/0
14 0 0 DROP all -- * * 86.59.160.0/19 0.0.0.0/0
15 0 0 DROP all -- * * 86.59.128.0/17 0.0.0.0/0
16 0 0 DROP all -- * * 86.111.128.0/19 0.0.0.0/0
17 0 0 DROP all -- * * 86.105.230.0/24 0.0.0.0/0
18 539 37022 DROP all -- * * 85.255.112.0/20 0.0.0.0/0
19 0 0 DROP all -- * * 83.223.240.0/22 0.0.0.0/0
20 0 0 DROP all -- * * 83.223.224.0/19 0.0.0.0/0
21 0 0 DROP all -- * * 81.95.144.0/20 0.0.0.0/0
22 0 0 DROP all -- * * 81.29.240.0/20 0.0.0.0/0
23 0 0 DROP all -- * * 81.17.16.0/20 0.0.0.0/0
24 0 0 DROP all -- * * 78.95.128.0/20 0.0.0.0/0
25 0 0 DROP all -- * * 72.21.128.0/20 0.0.0.0/0
26 0 0 DROP all -- * * 69.8.176.0/20 0.0.0.0/0
27 393 27185 DROP all -- * * 69.50.160.0/19 0.0.0.0/0
28 0 0 DROP all -- * * 69.50.16.0/20 0.0.0.0/0
29 0 0 DROP all -- * * 66.55.160.0/19 0.0.0.0/0
30 0 0 DROP all -- * * 66.37.112.0/20 0.0.0.0/0
31 0 0 DROP all -- * * 66.185.112.0/20 0.0.0.0/0
32 0 0 DROP all -- * * 66.102.32.0/20 0.0.0.0/0
33 0 0 DROP all -- * * 65.255.32.0/20 0.0.0.0/0
34 0 0 DROP all -- * * 64.28.176.0/20 0.0.0.0/0
35 0 0 DROP all -- * * 64.255.128.0/19 0.0.0.0/0
36 0 0 DROP all -- * * 63.246.32.0/20 0.0.0.0/0
37 0 0 DROP all -- * * 58.83.0.0/22 0.0.0.0/0
38 0 0 DROP all -- * * 58.65.238.0/23 0.0.0.0/0
39 0 0 DROP all -- * * 58.65.232.0/21 0.0.0.0/0
40 0 0 DROP all -- * * 217.69.112.0/20 0.0.0.0/0
I have a Real Time Web Application Security Rules Subscription. I change the ModSecurity Rule Setup and add the Atomic LoginData to Plesk. All looks fine but the ModSecurity Log is now empty.
- Debian 7 with all Updates
- Plesk Version 12.0.18 Update #49
Output from: ~# aum -df upgrade asl
[URL] ....
Why isnt Plesk 12 configuring firewalld under CentOS 7 correctly? We have to manuella enable port 8443 and all other ports manually with firewall-cmd..
View 1 Replies View RelatedI am running Plesk 11.5.30 Update #44, Postfix 2.8.14 and Spamassassin 3.3.1 on a Red Hat Enterprise Linux Server 6.5 server. I am looking to update the rules within Spamassassin. I have had a bit of a look and see that a crontab has been created but its a bash script with a comment saying it has been disabled by psa-spamassassin package (/etc/cron.d/sa-update).
Code:
#!/bin/sh
# This task was disabled by psa-spamassassin package
exit 0
Is there a reason why it has been disabled by Plesk? If I update the rules, will it break something?
I have recently added into Postfix RBLs to reduce the amount of SPAM my customers is getting and this is my next step in a list of things that I would like to change.
Just updated to V12 and noticed you can't copy a database from one domain to another as easy as before. So doing any testing is much harder. Is this correct or am I missing something...
View 5 Replies View RelatedI've got a problem to migrate A user from one server to another.
I tried to use the migration manager, but if I start the migration manager the migration will be started but after 2 seconds it has finished and no migration has be doen.
or should I moove the data manually?
After the micro update, the database copy function started to hung even just for copying database with 4 tables with less than 10 rows of recrods. Although I followed the link below to remove the hung database copy and remove the unfinished database copied. URL....However, no successful database was copied at all even after the timeout was adjusted.
View 1 Replies View RelatedI am having an issue with redirecting our local (inside network) traffic to our new web server via iptables in Linux. The setup we have right now is a Linux server (old web server and current firewall) and a new Windows 2003 server for the new web server.
Linux IP: 192.168.0.1
New Server IP: 192.168.0.22
-A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.22:80
The above works great for everyone outside the office but the internal network still sees the old web server (same box as this firewall).
I thought I could redirect the older server's ip to the new server for the internal office but this did nothing.
-A PREROUTING -p tcp -d 192.168.0.1 --dport 80 -j DNAT --to-destination 192.168.0.22:80
I then changed the 192.168.0.1 to our real ip number and this might be closer but the website now times out (packets getting lost maybe?).
Under plesk 12.0.18, I would like to create thousand email address with redirect and send copy to. Its a long work to do.
Is there a solution to create all these email via an import csv, xls or else ?
Ok, new to Plesk, trying to move from ispconfig. So I have Plesk 12 running on Centos 6 64bit in a VPS. I figured out how to upgrade PHP and now I have installed my first website. The website is joomla based but I am getting the below error when installing components:
Warning
Copy failed.
JInstaller: :Install: Failed to copy file /var/www/vhosts/virtual-sim-racing.com/httpdocs/home/tmp/install_55081e65af5fe/pkg_kunena.xml to /var/www/vhosts/virtual-sim-racing.com/httpdocs/home/administrator/manifests/packages/pkg_kunena.xml
Package Install: Could not copy setup file.
This suggest to me a permissions issue - but what to do with it. I have checked all of the relevant Joomla folder permissions and they are all showing as writeable, so it looks like something outside of that?
I don't want to have to stick with ispconfig much longer ...
In previous thread we made few manual transfer of our domains.
We also made some automated migration of few domains/sites using Web Host Manager's Copy an account from another server feature.
All the files and other settings were properly transferred from old server to new server, but only the mysql database is not visible on new server. I am unsure if the same got copied to new server.
I am having problems with two accounts, I get the following errors:
Code:
Failed to copy files storage to destination path. stderr: filemng: Cannot open destination file '/var/www/vhosts/domain.tld/httpdocs/index.html.Chn3rn' System error 122: Disk quota exceeded stdout: filemng: Cannot open destination file '/var/www/vhosts/domain.tld/httpdocs/index.html.Chn3rn' System error 122: Disk quota exceeded
I have run the command
Code:
quotacheck -avugfm
And the output from the command
Code:
df -i
is:
Code:
Filesystem Inodes IUsed IFree IUse% Mounted on
/dev/vzfs 20000000 1542375 18457625 8% /
/dev/simfs 20000000 1542375 18457625 8% /tmp
/dev/simfs 20000000 1542375 18457625 8% /var/tmp
none 1415577 113 1415464 1% /dev
I am at a loss, I don't know what else to try.
How to activate/enable the firewall by cli, does this is possible?
Firewall module is installed.
Option in plesk GUI working well.
Does this is possible ? If yes how ?
Is that possible to block baidu without specifying whole list of IDs it's using ?
View 1 Replies View RelatedI have these problems since version 11.5. Now I have installed version 12 on centos . FTP works fine and is super fast and speedy until i enable PLEK FIREWALL, I also tried to add passive port range 60000-65534 to Plesk Firewall rules.
But nothing works.
It takes like 10 times longer to Login + List Files + Make changes using FTP. We applying changes via FTp and its very slow. We can use plesk file manager but its very inconvenient way for quick file uploads and changes.
I already posted this as a bug report and now wanted to inform other users.
Starting with Plesk 11.5, the file "/opt/psa/var/modules/firewall/firewall-emergency.sh" contains the following line:
Code:
rm -f /opt/psa/var/modules/firewall/active.flag
That line stems from updating
Code:
Preparing to replace psa-firewall 11.0.9-debian6.0.build110120608.16 (using .../psa-firewall_11.5.30-debian6.0.build115130819.13_amd64.deb) ...
Unpacking replacement psa-firewall ...
Now, when you stop the firewall, you cannot start it again, cause deleting the active.flag disables the firewall:
Code:
# ll /opt/psa/var/modules/firewall/active.flag
-rw-r--r-- 1 root root 0 2013-11-26 09:22 /opt/psa/var/modules/firewall/active.flag
# /etc/init.d/psa-firewall stop
psa-firewall: firewall successfully disabled
# ll /opt/psa/var/modules/firewall/active.flag
ls: cannot access /opt/psa/var/modules/firewall/active.flag: No such file or directory
# /etc/init.d/psa-firewall start
psa-firewall: service is disabled
You then have to manually "touch" the active.flag to be able to start the firewall again. A workaround is to remove the line:
Code:
sed -i 's:rm -f /opt/psa/var/modules/firewall/active.flag::' /opt/psa/var/modules/firewall/firewall-emergency.sh'
I really hope that Parallels fixes this asap, as normally you won't notice that the firewall is not active when every works fine (nothing is blocked) and Plesk still shows all the rules.
I currently have the Web Application Firewall (ModSecurity) installed but would like a visual interface to block IP's, subnets etc.. Can I install the Plesk firewall as well without any conflict with the Web Application Firewall?
View 3 Replies View RelatedI have a brand new and fresh installed server with:
Parallels Plesk v12.0.18
openSUSE 13.1
My Problem is, every day i have to click on activate in the settings of the firewall. Otherwise i have no Mail. The rest (Hosting, etc.) works fine.
No changes in the firewall settings where made, just a migration from my old server.
Plesk Firewall has no effect on IPv6?
I am writing today regarding the Plesk Firewall. It seemed to be pretty handy for quickly blocking troublesome users from *replace-with-whatever-IP-block-is-giving-you-trouble*. Yet I am unable to block IPv6 addresses, and the fire wall seems to let some blocked IPv4s right in. I did not see any distinction as to v4 or v6 in the Firewall dialog for adding custom rules, so...
The question is...
(1) Is the Plesk Firewall *supposed* to apply rules to IPv6 by default?
If yes...
(2) Is there a setting or a switch that has to be configured for this to work?
If yes...
(3) Where are said configuration options located?
Okay, when I run /sbin/ip6tables -L (CentOS) I get output that resembles the iptables (no 6) output, only... what, converted to IP6? Not sure. Example output:
DROP tcp ::ffff:31.0.0.0/104 ::/0 tcp dpts:1:10000
In that particular instance I added a drop for the 31.0.0.0/8 block (using the Plesk Firewall interface), in order to create the script that's loaded into iptables (and ip6tables as well, apparently) when one elects to "Apply Configuration". It worked great, executed perfectly, and the iptables output list output looked to be (and remember, I have grossly insufficient background knowledge in this area) accurate.
Yet at the time of this writing I can see via live traffic monitor that an address in the 31.0.0.0/8 block (IPv4) is pounding away at a website. This is curious, as the live traffic monitor indicates an IPv4 address. So... can an IPv4 address be detected and recorded from a host that is only able to connect via IPv6? While an interesting question, I was more concerned with just blocking the IPv6 address and get more academic with it later.
But this raises another question; why would Plesk populate ip6tables and not provide an interface to actually submit IPv6 addresses.
When I modify rules using the firewall panel it is not generating rules correctly when selecting allow from selected sources deny from others.
View 2 Replies View RelatedRunning plesk 12.018 on OpenSUSE 13.1
What causes the firewall to change / reset itself periodically? I enabled the plesk firewall, but some time later it is reset itself and switched to the opensuse firewall (completely different rule set, which blocks most of the ports).
I then disabled the plesk firewall and loaded my own iptables rule set via iptables-restore command. However a few hours later, it also gets reset to the opensuse firewall. The std. opensuse firewall closes most of the ports, so then our email is blocked.
I would like to permanently switch off any plesk handling of the firewall and manage the iptables myself. How to do this?
I also have fail2ban running and defined my own jail.local files.
I am doing migration of plesk 11 from one server to another server on both server version is same but after migration I cant find any service plan which is there on old server.how can i copy / migrate service plan from one serer to another server
View 4 Replies View RelatedAfter upgrading to Plesk 12 the FTP connection has become very slow. Mode Security, Fail2Ban and Plesk Firewall have been enabled, the security is set to force sFTP and maximum security and in /etc/proftpd.d/ a conf file has been added to set the passive ports that have been opened in the Plesk Firewall (60000 to 62000)
Turning off the Mod Security does not solve the slow connection.
What can we do to detect the cause of the problem?