Firewall setup of IP range

[Polli]

we would like to restrict the FTP access
by plesk Firewall to allow only special IP ranges the access.
e.g. 88.61.*.* or 88.62.*.*

IP ranges, due to an full 4 Block IP address is not practicable. Our Internet
Providor do dynamic IP allocation.
All our admins, we have several IP addresses in use, but the first 4 Numbers
(2 blocks) are admost the same.

Whow I could set IP adresses in Plesk Firewall with whitecards of IP Blocks ?
Leave them blanc or asterisk is not possible.

Who is the right way to do this, please ?
Thank you

 

[jwdick]

Set your firewall to allow

88.61.0.0/16

This will give access to 88.61.0.0 through 88.61.255.255

Then the same for 88.62.0.0/16

 

[Polli]

@ jwdick
Great, thanks, it works fine.

Many thanks

 

[kuhle]

Is it possible to do the reverse - i.e. to BLACKLIST ranges of IP addresses within the Plesk firewall?

I get daily attempts to hack the server, and want to block these ranges of addresses.

As the server is live, I am reluctant to try and install APF and BFD as mentioned in http://forum.plesk.com/showthread.p...setup+new+plesk

It has been suggested to us that we use public keys instead of SSH on the server, and we are looking at that as an option.

Grateful for any advice.

 

[madadam]

With Plesk 8.0 it was possible to use any length mask, eg. 190.192.240.0/20.

My installation of Plesk 8.1 won't allow certain perfectly legal combinations:

For instance: 190.192.240.0/16 is allowed, BUT 190.192.240.0/24 is NOT - yet 190.192.240.1/24 IS...

Anyone else come across this bug? It's rather annoying to say the least!

 

[HoneyMonster]

Yes its really annoying!

I can't add 192.168.2.0/24 but I can add 192.168.2.0/23

 

[john753]

Is there also a way to set-up a more complex ip range, i.e. 84.136.0.0 - 84.191.255.255, without having to add a rule for each subset from 84.136. through 191?

 

[DReffects]

Same stupid problem here.. want to block the crazy Yahoo slurp bot via

74.6.0.0/16

but plesk won't allow this range for some reason

any fix yet?