Skip to content

I suggest you...

← Feature Suggestions

Add ip manually to fail2ban

It is not possible to add an ip manually to fail2ban trough Plesk interface. Sometimes you detect an offending ip address which you want to ban from your system, before it is detected by recidive rule.

151 votes

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Anonymous shared this idea  ·   ·  Report…  ·  Admin →

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • EhudZ commented  ·   ·  Report

    The is possible:

    fail2ban-client -vvv set httpd-forbidden banip 54.214.128.0/17

    Or via:
    fail2ban-client set your-jail-name banip 192.0.2.1
    fail2ban-client set your-jail-name unbanip 192.0.2.1

  • Anonymous commented  ·   ·  Report

    Security is everything, it's a 5 star yes from me.

  • EhudZ commented  ·   ·  Report

    IMHO, the Plesk FireWall is the place for such IP...

  • Ziad commented  ·   ·  Report

    of course it is necessary

  • Norbert commented  ·   ·  Report

    Absolutely NECESSARY!
    One spammer, using 2 IP addresses swamps my server with tens of thousands of spam emails and I can do NOTHING to ban this IP addresses.

    Such an important tool and it is not available (it is on cPanel for donkey years already, though)

  • Azurel commented  ·   ·  Report

    It is already possible out-of-box. You can create with PHP a textfile with bad ips and in modsecurity you add a own "jail" that use this file. Thats all.

  • GravuTrad commented  ·   ·  Report

    fail2ban-client set manbat banip <173.194.76.27> is not working

  • J P commented  ·   ·  Report

    +1 this is definitely necessary. I had two IPs attack a site relentlessly, taking up 100% CPU. They couldn't be added to the jail unless through CLI

  • G J Piper commented  ·   ·  Report

    Yes having a GUI for "fail2ban-client set recidive (un)banip <IP Address>" would be fantastic. Seems like an easy addition since the client already exists.

← Previous 1

Feature Suggestions: Security

Categories

Feedback and Knowledge Base

(thinking…)