• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Geo blocking for subscriptions / domains ?

shopuser

Basic Pleskian
Server operating system version
20.04
Plesk version and microupdate number
18.0.52
I have installed geo blocking and work in the web-app firewall, but for all subscriptions the same rule :

Code:
SecGeoLookupDB /usr/share/GeoIP/GeoLiteCountry.dat

SecRule REMOTE_ADDR "@geoLookup" "phase:1,chain,id:99999932392,drop,log,msg:'Blocking %{geo.country_code}'"

SecRule GEO:COUNTRY_CODE "@pm RU KP BR UA CN BR IN PK"


how i can add special rules for subscriptions ?
 
Geoblocking is done on the network level. It does not know about subscriptions or users. For that reason it is not possible to have separate firewall rules for different subscriptions. The workaround would be to run different servers or cloud instances for different sets of firewall configurations.
 
But I still thought that it was possible to block or unlock certain ip`s ( Apache & nginx settings in the domain ) regardless of the server-wide settings
 
Yes, but geoblocking needs to block very large sets of IP address ranges. For that a list of single IPs would considerably slow down the server. Instead, ipset is used on the operating system level, which is very fast.
 
@shopuser Just a note that our Juggernaut Firewall extension fully supports Geoblocking at the domain level.
 

Attachments

  • 2023-06-25_01h08_45.png
    2023-06-25_01h08_45.png
    174.8 KB · Views: 7
@shopuser Just a note that our Juggernaut Firewall extension fully supports Geoblocking at the domain level.
installed the app, and in the account shows:

The Valid Domain, IP and Directory will be detected & saved the next time the license is accessed.

and in plesk : Der Lizenzschlüssel ist ungültig. (The license key is invalid )
 
Back
Top