Issue Cloudflare and Firewall rules

[Pascal_Netenvie]

Server operating system version

Debian 11.7

Plesk version and microupdate number

18.0.53

Hello,
As i use Cloudflare for domains i aim to autorize its IP in Fail2ban & Firewall.
So i have whitelisted Cloudflare IP in fail2ban then i try to add it in Firewall with these CLI commands :

/usr/local/psa/bin/modules/firewall/settings -e
/usr/local/psa/bin/modules/firewall/settings -c
/usr/local/psa/bin/modules/firewall/settings -s -name 'Cloudflare In' -direction input -action allow -remote-addresses "173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22"
/usr/local/psa/bin/modules/firewall/settings -a
/usr/local/psa/bin/modules/firewall/settings -c

At CLI it seems ok and it display "The firewall rules were confirmed."

But at same moment in Plesk GUI i have a message saying rulles are being applied, and after a long time an error message saying that new and previous rules can't be checked and Firewall rules have been reseted to default.
And finally when i check by CLI (or GUI) all my rules seems to be ok and applied.

What is the point ? Ok or not ?

 

[Peter Debik]

Please try to set long timeout values as described in https://support.plesk.com/hc/en-us/...ion-after-applying-new-firewall-configuration (just with much longer timeouts, e.g. 90 seconds, 120 seconds or so). Does this solve the issue?

 

[Pascal_Netenvie]

Ok i made this configuration change.

At SSH modifications seems ok :


But at GUI always same problem :


There is another problem here ...

 

[Pascal_Netenvie]

And finally the rules seems to be set , i can see it in GUI :