• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Resolved Plesk Firewall Import create double entries

NormanHuth

New Pleskian
Server operating system version
Debian 12.4
Plesk version and microupdate number
18.0.58 #2
I have an entry like this in the export:
JSON:
    {
        "name": "Allow Incoming Database Connections",
        "direction": "input",
        "action": "allow",
        "ports": "3306/tcp",
        "from": "XX.XXX.XXX.XXX",
        "class": "custom",
        "type": "custom",
        "originalId": 231,
        "id": 281
    },

I am changing this position. I have tested the 4 possibilities:

JSON:
    {
        "name": "Allow Incoming Database Connections",
        "direction": "input",
        "action": "allow",
        "ports": "3306/tcp",
        "from": "YY.YYYY.YYYY.YYY",
        "class": "custom",
        "type": "custom",
        "originalId": 231,
        "id": 281
    },

or

JSON:
    {
        "name": "Allow Incoming Database Connections",
        "direction": "input",
        "action": "allow",
        "ports": "3306/tcp",
        "from": "YY.YYYY.YYYY.YYY",
        "class": "custom",
        "type": "custom",
        "originalId": 281
    },

or

JSON:
    {
        "name": "Allow Incoming Database Connections",
        "direction": "input",
        "action": "allow",
        "ports": "3306/tcp",
        "from": "YY.YYYY.YYYY.YYY",
        "class": "custom",
        "type": "custom"
    },

or

JSON:
    {
        "name": "Allow Incoming Database Connections",
        "direction": "input",
        "action": "allow",
        "ports": "3306/tcp",
        "from": "YY.YYYY.YYYY.YYY",
        "class": "custom",
        "type": "custom",
        "originalId": 231
    },

No matter how. After the plesk ext firewall --import command I always have the entry with the XXX & YYY value in the firewall. So the second value is simply added and the old one is kept.

I have also checked the import file. As intended, the XXX entry is not present in this file.
 
So. I no longer need Premium Support in the forum.

I have found a solution that works for men.

You can also simply update the rules, delete them, etc., such as
Code:
plesk ext firewall --set-rule -from={ip} -id={id}

So you can build your own firewall script.

All options are available as usual with help:
Code:
plesk ext firewall --help
 
Back
Top