Add ip manually to fail2ban
It is not possible to add an ip manually to fail2ban trough Plesk interface. Sometimes you detect an offending ip address which you want to ban from your system, before it is detected by recidive rule.
This functionality was added in Plesk 18.0.63 (https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18063). We suggest you to update to Plesk 18.0.63 and check it out.
If you have any feedback on the implementation of this feature, please let us know on the forum: https://talk.plesk.com/forums/plesk-obsidian-for-linux.748/
Thank you!
— AY
-
EhudZ commented
The is possible:
fail2ban-client -vvv set httpd-forbidden banip 54.214.128.0/17
Or via:
fail2ban-client set your-jail-name banip 192.0.2.1
fail2ban-client set your-jail-name unbanip 192.0.2.1 -
Anonymous commented
Security is everything, it's a 5 star yes from me.
-
EhudZ commented
IMHO, the Plesk FireWall is the place for such IP...
-
Anonymous commented
+1
-
Ziad commented
You can use the below to block manually:
-
Ziad commented
of course it is necessary
-
Norbert commented
Absolutely NECESSARY!
One spammer, using 2 IP addresses swamps my server with tens of thousands of spam emails and I can do NOTHING to ban this IP addresses.Such an important tool and it is not available (it is on cPanel for donkey years already, though)
-
Azurel commented
It is already possible out-of-box. You can create with PHP a textfile with bad ips and in modsecurity you add a own "jail" that use this file. Thats all.
-
GravuTrad commented
fail2ban-client set manbat banip <173.194.76.27> is not working
-
Atakan Köycü commented
+1
-
Anonymous commented
+1
-
J P commented
+1 this is definitely necessary. I had two IPs attack a site relentlessly, taking up 100% CPU. They couldn't be added to the jail unless through CLI
-
kevin Heath commented
+1
-
G J Piper commented
Yes having a GUI for "fail2ban-client set recidive (un)banip <IP Address>" would be fantastic. Seems like an easy addition since the client already exists.
-
Marco commented
+1
-
Anonymous commented
Why is not not already an option?
-
Anonymous commented
+1
-
Anonymous commented
+1
-
Anonymous commented
jep, need it also
-
Anonymous commented
jep, need it also