Resolved Can't ssh to my website (because of firewall)

[Jimlee3]

I restricted access to website via ssh to certain IPs and now my IP has changed and I can't ssh to website and I can't login using the login page.

What should I do ?

 

[IgorG]

Looks like your subnet was restricted for admin access in Tools & Settings -> Restrict Administrative Access or with fail2ban.

You can try login to Plesk from another subnet or with VPN and change corresponding settings there.

 

[Jimlee3]

Looks like your subnet was restricted for admin access in Tools & Settings -> Restrict Administrative Access or with fail2ban.

You can try login to Plesk from another subnet or with VPN and change corresponding settings there.

but VPN will not have the same IP as my old one so it will not work as well. If I gain ssh access, how can I update the fail2ban to allow access to website control panel in port : 8443 ?

 

[IgorG]

You can temporarily stop fail2ban service:

# /usr/local/psa/admin/sbin/f2bmng --disable-jails plesk-panel
# /usr/local/psa/admin/sbin/f2bmng --stop

login to Plesk and apply necessary settings there.

 

[Jimlee3]

You can temporarily stop fail2ban service:

# /usr/local/psa/admin/sbin/f2bmng --disable-jails plesk-panel
# /usr/local/psa/admin/sbin/f2bmng --stop

login to Plesk and apply necessary settings there.

thanks, I tried that but I keep getting this:
warning Fail2ban server is down...

I checked the log file but fail2ban.log is empty.

#fail2ban-client status
ERROR  Unable to contact server. Is it running?

I also tried with sudo but same error.

 

[IgorG]

But if you logged through ssh, can you login to Plesk UI from this IP?
Maybe you have enabled restriction in Tools & Settings -> Restrict Administrative Access but not fail2ban?

 

[Jimlee3]

But if you logged through ssh, can you login to Plesk UI from this IP?
Maybe you have enabled restriction in Tools & Settings -> Restrict Administrative Access but not fail2ban?

the ssh is via the online internal ssh provided by the hosting company
I still can't ssh from my own computer

I also followed this step:
https://support.plesk.com/hc/en-us/...P-Access-restriction-policy-currently-applied
and reset the access policy but still have no access to control panel

 

[IgorG]

Try to completely disable firewall on this Plesk server, at least.

 

[Jimlee3]

Try to completely disable firewall on this Plesk server, at least.

is it possible to temporary disable firewall without resetting any rules? I disabled the iptables but how can I update my ip and start everything again?

 

[IgorG]

It depends on your OS. For CentOS7, for example:

# service iptables stop

 

[Jimlee3]

It depends on your OS. For CentOS7, for example:

# service iptables stop

thanks, I disabled it and logged into plesk. I think there is something wrong with fail2ban,
I tried to restart the itables with #service iptables restart and it was okay
but in the plesk control panel under security it says "ip address banning OFF"

is fail2ban running ?

 

[IgorG]

is fail2ban running ?

Check it with

# /usr/local/psa/admin/sbin/f2bmng --status

 

[Jimlee3]

Check it with

# /usr/local/psa/admin/sbin/f2bmng --status

Check it with

# /usr/local/psa/admin/sbin/f2bmng --status

it says "is stopped"
and I just restarted it again - thanks for your help