• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Resolved No Firewall in Plesk

stevland

Basic Pleskian
I recently migrated from a VPS with Plesk 12.5.

My current setup:

‪CentOS Linux 7.3.1611 (Core)‬
Plesk Onyx Version 17.0.17 Update #11

There is no Firewall listed under Tools & Settings > Security.

Is that because my default CentOS 7 installation already had Firewalld enabled before I installed Plesk Onyx?

I'm also confused about who is managing my ProFTPD service... is it Plesk or CentOS 7?

I have psa-proftpd 1.3.5b-cos7.build1700161026.16 listed under Tools & Settings > Plesk Components.

But there is nothing related to FTP under Tools & Settings > Services.

All of my hosting accounts are intermittently getting "failed to retrieve directory listing" when connecting via FTP and I am spinning my wheels trying to resolve it!
 
BTW...
# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client ftp ssh
ports: 110/tcp 80/tcp 1194/tcp 21/tcp 139/tcp 106/tcp 53/tcp 1354/tcp 50000-50500/tcp 20-1023/tcp 5432/tcp 8447/tcp 143/tcp 3306/tcp 5224/tcp 22/tcp 1394/tcp 465/tcp 995/tcp 25/tcp 137/udp 8443/tcp 138/udp 993/tcp 443/tcp 8880/tcp 445/tcp 53/udp
protocols:
masquerade: no
forward-ports:
sourceports:
icmp-blocks:
rich rules:
 
SELinux set to permissive

# setenforce 0
# sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: permissive
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Max kernel policy version: 28

FirewallD off

# /bin/syste
# /bin/systemctl status firewalld.service
firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: inactive (dead) since Mon 2016-12-19 18:27:37 PST; 4min 34s ago
Docs: man:firewalld(1)
Process: 481 ExecStart=/usr/sbin/firewalld --nofork --nopid $FIREWALLD_ARGS (code=exited, status=0/SUCCESS)
Main PID: 481 (code=exited, status=0/SUCCESS)

FileZilla can't display directory listing

Status: Resolving address of stevland.com
Status: Connecting to 71.19.146.141:21...
Status: Connection established, waiting for welcome message...
Status: Initializing TLS...
Status: Verifying certificate...
Status: TLS connection established.
Status: Logged in
Status: Retrieving directory listing...
Command: PWD
Response: 257 "/" is the current directory
Command: TYPE I
Response: 200 Type set to I
Command: PORT 192,168,2,10,196,112
Response: 200 PORT command successful
Command: MLSD
Error: Connection timed out after 20 seconds of inactivity
Error: Failed to retrieve directory listing

 
Nevermind.

It turns out the the issue is local to my router. If I put my computer into a DMZ I have no trouble using FTP.

Meh. I have never encountered an FTP / router issue like this one. It just happened to coincide with my new VPS. But it turns out to have nothing to do with Plesk or CentOS.

*hours wasted*
 
Back
Top