Update crucial security tools such as Fail2ban, Rootkit etc.
Hi guys,
I am still trying to figure out why is it that we have a VERY OLD Fail2ban security module for Plesk? This version needs a lot of tweaking and has many bug fixes in the latest updates (currently: 0.10.1 release date 2017/10/12. So may releases, features, bug fixes and optimizations have been released, yet Plesk is still using a very old version. I dont understand how is it that you guys value security, but this simple update isn't implemented, yet you guys have increased the Plesk License cost overall. I dont get it at all. My other issue is watchdog rootkit. The version is 1.3.4, the latest is 1.4.4, which also fixes issue and false negatives. It's been more than 2 years, this needs to be fixed/updated asap.
Thank you for your feedback. Unfortunately, this request contains several different suggestions, and it’s not technically possible to properly handle them inside one request.
1. Fail2Ban
Fail2Ban v0.9.x is a stable branch, that’s why we use it now.
Currently, Fail2ban v0.10.x is experimental (https://www.fail2ban.org), but you can vote for https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/17924536-fail2ban-now-supports-ipv6-please-upgrade and we will consider this functionality in upcoming releases if it will be popular and not experimental.
2. RkHunter v1.4.4
This functionality was added in Plesk Onyx 17.5.3 Update 15. We suggest you to upgrade to Plesk Onyx 17.5.3 Update 15 and check it out (https://docs.plesk.com/release-notes/onyx/change-log/#1753-mu15).
— AY