Plesk firewall

[rubensans]

How does Plesk firewall work?

How is it compared to visnetic?

Does it suport multiple ip's (when the server has more than one ip).

Best Regards.

 

[AbsolutelyFreeW]

useful links for you:

http://faq.sw-soft.com/index.php?ToDo=view&questId=249&catId=53

and

http://faq.sw-soft.com/index.php?ToDo=view&questId=394&catId=53

 

[rubensans]

If I have multiple ip's in the server,

Can I open some ports for one Ip and some ports for another?

Or, when I open a port it's opened for all the ip's of the server?

or the ip's that plesk have assigned?

Best Regards.

Ruben.

 

[AbsolutelyFreeW]

I think it might be possible if you edit the pfwmng.js file manually to serve your needs. I have not tried that myself though.

 

[Laurent Bauer]

Hello,

Thanks for the link in this thread, about the firewall configuration.
I tried the command "cscript "%plesk_bin%/pfwmng.js" --mode off" but got an error :
"Error : No interfaces found".

I checked, and the firewall is still running, indeed.

My server has 2 IP addresses, is it a problem ?

Thanks

Laurent

 

[aracnet]

by the way is plesk firewall is enough for server 2003 or we need to install additional firewall on win2003 side too?

 

[Laurent Bauer]

I have the same error : "no interface found", with 2 IP addresses. Should I tell which IP to use ? How ?

Thanks for your help

Laurent

 

[Laurent Bauer]

Found it !

No answer... so I searched the scripts and that's what I found :

function EnumerateInterfaces () {
[...]
if ( str.match(/^Enabled\s+\Dedicated\s+(.*)/) ) {
Interfaces.push(intf = "\"" + RegExp.$1 + "\"");
diag (DiagError, str);
}

This function is a problem with "foreign" operating systems (I mean not in English).

In my case, the OS is translated in French and the command "netsh routing ip show interface" translates "Dedicated" into "Dédié" so the regexp won't match.

Quick and dirty workaround : launch the script and "manually" add the appropriate interface in the EnumerateInterfaces() function:

Interfaces.push(intf = "\"" + "eth0" + "\"");

It solved my problem, at least

There might be other functions involved, I didn't check the whole script...

Laurent