Issue IP Access restriction - locked out of PLESK

[weareimpulse]

Server operating system version

Ubuntu 22.04.5 LTS

Plesk version and microupdate number

Plesk Obsidian 18.0.65 Update #2 Web Host Edition

can anyone help please...

the IP Access restriction feature was added to one of our servers, however, the person who added it did this whilst using a dynamic IP - rather than our static, and now we're locked out.

We have SSH access, so is there a way to add an IP via this to gain PLESK access, or maybe disable the feature so we can get in and set it up properly?

Many thanks...

 

[Raul A.]

Hi,

Please have a look at https://support.plesk.com/hc/en-us/...P-Access-restriction-policy-currently-applied

 

[weareimpulse]

Legend. many thanks

Hi,

Please have a look at https://support.plesk.com/hc/en-us/...P-Access-restriction-policy-currently-applied

 

[trialotto]

Legend. many thanks

@weareimpulse

It is not a good thing to (only) use the "Restrict Administrative Access" functionality.

The best way is to setup Plesk Firewall extension with :

1 - SSH : allow access to IPs chosen, deny all others

2 - Plesk Panel : allow access to IPs chosen, deny all others

and please do

3 - remove the IPs from "Restrict Administrative Access" functionality - otherwise, this will become a potential problem in the near future,

4 - NOT use dynamic IP addresses with netmasks - it is possible, but if often fails (for many reasons) and it also increase the attack surface!

5 - CREATE a cloud based (cheap) VM with a STATIC IP - this can be stopped/started at all times, hence granting you a fail-over access point

6 - STOP the cloud based VM when you are not using it - only start it when you are locked from Plesk and cannot access Plesk anymore


The simple rule here is : only grant 1 or 2 IPs access to SSH and Plesk Administrative interface, with a VM with a (static) IP as a fail-over access point.

In general, it is a good idea to limit the fail-over access point to SSH, since it is more important to have access to the server itself (via SSH) than having access to Plesk Administrative interface (which interface cannot help you in all scenario's - it only covers most of the lock out scenarios!)


I hope the above helps!


Kind regards....


PS If you run 2 or more dedicated servers, then there is no need for cloud based VMs. However, it still is a good idea, for instance when you run all servers in one and the same datacenter!