I have Ubuntu server with Plesk 12.5.30
A second IP was added to my server on eth0. To my alarm Plesk only offers firewall on the whole interface or am I missing something simple? It allows you to set rules from an IP, but I assume that means an external IP, not one of the IPs of the server.
So it seems I have to use IPTABLES direct, to set rules of each IP. Alas I some Plesk script re-writes IPTABLES on reboot.
How could one using Plesk achieve control of the firewall for each IP, assuming the IPs attached to the server etho are 5.5.5.5 and 5.5.5.6 eg
5.5.5.5:443 to 5.5.5.5:443 https apache
5.5.5.6:443 to 5.5.5.6:5555 something else.
5.5.5.6:80 to 5.5.5.5:22
and so on, and close the second IP to ping etc.
If I got my ISP to add another interface, so we have eth0 and eth1, would that allow Plesk to offer me control over the firewall for each IP? But that should not be necessary.
Gerry Bulger
A second IP was added to my server on eth0. To my alarm Plesk only offers firewall on the whole interface or am I missing something simple? It allows you to set rules from an IP, but I assume that means an external IP, not one of the IPs of the server.
So it seems I have to use IPTABLES direct, to set rules of each IP. Alas I some Plesk script re-writes IPTABLES on reboot.
How could one using Plesk achieve control of the firewall for each IP, assuming the IPs attached to the server etho are 5.5.5.5 and 5.5.5.6 eg
5.5.5.5:443 to 5.5.5.5:443 https apache
5.5.5.6:443 to 5.5.5.6:5555 something else.
5.5.5.6:80 to 5.5.5.5:22
and so on, and close the second IP to ping etc.
If I got my ISP to add another interface, so we have eth0 and eth1, would that allow Plesk to offer me control over the firewall for each IP? But that should not be necessary.
Gerry Bulger