• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question How to deny all IPs in Plesk Firewall except certain IPs (e.g. Cloudflare IPs)?

BernieG

Basic Pleskian
Hi,

My website is going through a DDoS attack and now I'm trying to set up my website to use Cloudflare. I set up my website already through Cloudflare but now I'm trying to block any direct access to my server/website IP address since the hackers can still do DDoS attack using my IP address.

Please see screenshot image like below, I set up this configuration on my Plesk Firewall, however, I can still access my website if I use the IP address; why isn't Plesk blocking my access? Since I can still access my website via the IP address the DDoS attacks are still happening.


Should I block all IPs using .htaccess file instead? I would think the Plesk Firewall would be better option to use but it doesn't seem to be blocking all incoming traffic.

Thank you!
 
Back
Top