Question add IP Addresses to the Firewall module in bulk using import and export function?

[nikketrikke]

Hello
iI need to add ip address for cdn to be whitelisted on firewall
so
I created a rule for cdn ip list with 2 enters on firewall... then exported via json the firewall rules and named file (original to have as backup)...then using a text editor like Notepad++ I search where the 2 addresses listed are and simply put one by one comma separated all the address i need to whitelist...saved json file
then imported again the modified file (json) into firewall and seems all rules are a their position loaded correctly
Possible so simple????
How can i check if that addresses are correctly whitelisted? there is a shh command to view

iptables -L INPUT -v -n | less

i tried and some addresses are listed not the ip6 exadecimal address
thanks

 

[Kaspar]

If you want to list all IPv6 rules you have to use the ip6tables utility instead. For example: ip6tables -L INPUT -v -n | less

Also, on a side note, manually exporting, editing and importing firewall rules seems kinda time consuming, There are CLI command to manage firewall rules too. Which might be an easier way to bulk add IP address to rules. More info can be found here: https://support.plesk.com/hc/en-us/...rules-using-Plesk-Firewall-in-Plesk-for-Linux

 

[nikketrikke]

If you want to list all IPv6 rules you have to use the ip6tables utility instead. For example: ip6tables -L INPUT -v -n | less

Also, on a side note, manually exporting, editing and importing firewall rules seems kinda time consuming, There are CLI command to manage firewall rules too. Which might be an easier way to bulk add IP address to rules. More info can be found here: https://support.plesk.com/hc/en-us/...rules-using-Plesk-Firewall-in-Plesk-for-Linux

thanks for the suggestion I see ip6tables ...
i know how to add single rule as in your link but the problem is adding many ip address one by one... my trick of exporting modify and importing json is for adding in bulk so many ip addresses... i not found a real answer in this forum or over the web
only one answer in a ver difficult way...
my solution seems so simple but i notknow if correct due it is so intuitive but never reported here or on the web
can you tell me if correct

 

[Kaspar]

[...]
can you tell me if correct

Yes, that's a perfectly valid method to manage firewall rules.

 

[nikketrikke]

not seems correct it does not works...
i make another workaround using CSF firewall and make a batch with a allow.txt file with all ip addresses... csf puts in iptables correctly..
then switch off CSF (due it send me a tons of email by LFD not solved) so i enable CSF and use it only to add in batch neww ip addresses then switch off again..