Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to figure out the best way to add IP blocklists to my Plesk 10.4.4 server (CentOS). It's a simple Virtual Server I recently acquired through my hosting company.

I've used .htaccess files in the past to block IP address ranges; IP ranges were from Wizcrafts.net for example. But that only blocks http/https access. Plesk has a decent Firewall module, but that only allows you to enter one line at a time.

I've heard of APF, but I'm afraid of trying to install it with Plesk, as there are many ports that should remain open for upgrading/managing the Plesk server. The APF route will probably get me into a mess of problems.

So, I assume that iptables are a possibility. Is there a way I can shell in and add the blocklists as iptables? Does anyone have any experience or advice? I'd like to block these Nigerian hackers and other country hackers from everything I do.

share|improve this question
add comment

2 Answers 2

up vote 1 down vote accepted

Have you looked at fail2ban? fail2ban

It seems there has been work to use it with plesk. fail2ban with plesk

Hope this helps.

share|improve this answer
    
Thank you for the fail2ban advice. It doesn't really answer the question, but provides a nice solution to the underlining problem. –  jjwdesign Nov 20 '13 at 18:55
    
Update - Finally got away from Plesk. It's like having a tumor removed. Moved to Ubuntu. –  jjwdesign Jul 7 at 12:20
add comment

http://easyfwgen.morizot.net/gen/

this is a very useful website, which generates a good iptables script, that is as far as casual servers are concerned, pretty much complete.

you have the choice of few customizations, and editing the resulting script later on is fairly straightforward.

and hey, you can always just read it all, and learn how to make your own iptables script :)

when this script is run on a VPS, it will throw few errors due to some kernel module loading in it, that can't be achieved on a VPS, you can safely ignore them.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.