Database Reachable from the Internet ?

[Pascal_Netenvie]

Hi,
I've done a security scan on a brand new server with Debian 8 and Plesk 12.5 and there is one medium severity risk :

Port: postgresql (5432/tcp)
Summary: The remote host is running a database server that is reachable from the Internet.
A PostgreSQL server is listening on this port.
Recommended Solution: Filter incoming traffic to this port.

Is it a false positive or can we fix that ?

 

[Lloyd_mcse]

Hi Pascal_Netenvie,
Personally, I have both MySQL and PostgreSQL set to block all except 127.0.0.1 in the Plesk Firewalll.
But I'm sure it's not installed by default, you can easily check by opening..

Plesk -> Tools & Settings -> Updates & Upgrades

If it is installed, edit the Plesk Firewall PostgreSQL rule to block all except 127.0.0.1
I hope that helps
Regards

Lloyd

 

[Pascal_Netenvie]

Hi Lloyd,

Thx for you reply.
Is there an easy way (by console) to do this (edit the Plesk Firewall PostgreSQL rule to block all except 127.0.0.1).

I know there is a way to do this by Plesk (By enabling firewall rules managment) but it execute a shell script and i'm not sure it is mature on v 12.5.
Did you tested it ?

In another way i wonder if i could just remove PostgreSQL as server don't use it ... Websites use MariaDB.

 

[Lloyd_mcse]

Hi Pascal,
unless you are familiar with iptables, I'd use the Plesk Firewall Extension it's basically a frontend for iptables.
Yeah I use the Plesk Firewall Extension, haven't had any issue with it through multiple Plesk versions.

If you're not using PostgreSQL then yeah, there's no reason to have it installed.
Regards

Lloyd

 

[Pascal_Netenvie]

Hi,
I removed PostgreSQL from Plesk. More silogic and simple.

Thx.