• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

plesk Firewall module problem

A

atomicmak

Guest
i am trying to use plesk's firewall module and i defined some policy which shows

/etc/rc.d/init.d/iptables status

but after 5 to 10 minutes it gets clear up if i issue same command it shows nothing in filter chain

here is sample :

[root@ns3 root]# /etc/rc.d/init.d/iptables status
Table: filter
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Table: mangle
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Table: nat
Chain PREROUTING (policy ACCEPT)
target prot opt source destination

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

[root@ns3 root]#

-------------------------------------
i have problem because i am blocking
china, korea, russia, and many more network due to spam and other attacks coming to my server and my customer has no reach in this countries and no need from this customers specially for spam mails.

the problem is iptables not working properly and so i cant get it work.

i did try to save iptables and added some more rule by hand through VI command and when i restart iptables it start working again but then in another 5 minutes its status shows blank chain.

Can any one help me to solve this problem ?

i am so much tired setting up it again and again and i cant go to ssh and restart it every 5 minutes.

please help.
 
i just found that there was apf installed along with bfd

Dec 05 17:25:00 ns3 apf(6304): flushing & zeroing chain policies
Dec 05 17:25:00 ns3 apf(6304): firewall offline
Dec 05 17:30:00 ns3 apf(9615): flushing & zeroing chain policies
Dec 05 17:30:00 ns3 apf(9615): firewall offline
Dec 05 17:35:01 ns3 apf(13060): flushing & zeroing chain policies
Dec 05 17:35:01 ns3 apf(13060): firewall offline
Dec 05 17:40:01 ns3 apf(16044): flushing & zeroing chain policies
Dec 05 17:40:01 ns3 apf(16044): firewall offline

can any one tell me how to resolve ?
 
Plesk Firewall module error

I try to add a firewall rule to block IP addresses.

I get an error when I activate the rule.

Error: Could not activate firewall configuration:

safeact: safeact: /usr/local/psa/var/modules/firewall/firewall-new.sh failed:
iptables: No chain/target/match by that name


proc_close() failed: var: Deprecated. Please use the public/private/protected modifiers

Running Plesk 8.1, FC5 x86 64-bit. Think there is a old script that does work in the new version Plesk/OS env.

Any can help?

Or is Plesk development team going to provide this urgent bug fix? Crucial for security!

Thanks.

D'HUB
 
Back
Top