Block the IP of the selected country in Firewall
Firewall should be able to block the IP of the selected country. I have a lot of traffic from the IP 5.10. *. *
Rafal
shared this idea
88 comments
-
Anonymous
commented
well it should be possible to block certain countries from accessing certain ports - for example mail ports ... to prevent password cracking attempts.
-
eightynn
commented
this feature is more important today than ever. i don't really understand why so few votes were made for it. :(
-
pguy
commented
plesk is one of the best applications i used in my live. so you have to go forward.
-
Anonymous
commented
This is a very important feature as people try and ***** SMTP passwords and even if paying for Imunify360 that doesnt help because each attempt comes from a new password. If you know which geographical location most of your users are from then we should be able to block IMAP/SMTP access from all countries and only allow certain countries. This works well in Juggernaut but seeing that I pay so much more from Imunify360 I would expect this to be standard in Imunify360
-
stalkerdab
commented
Have the same problem
-
Dimitris
commented
Maintaining lists of IPs or even subnets by hand on multiple servers is neither practical nor secure enough. There are already projects that maintain such lists (honeypot, ip2location etc).
-
Anonymous
commented
I have enabled fail2ban and greylisting but I still frequently see servers in the mail.log which try to login with dictionary passwords.
The only way I know to get rid of those is to deny them completely.
It is a pain to do this from the GUI and there should be a CLI for this. -
Anonymous
commented
The Plesk firewall already can blocks of networks, by adding a CDIR netmask.
In your example, use 5.10.0.0/16 to block all traffic from the 2.10 network.
However, this does not block data from a specific country, but from a specific (group of) network(s). Keep in mind that countries may have a lot of A/B/C type of networks that are not consecutively ordered.I don't know any complete list of networks used in a specific country, but you can do a search at organisations like ripe.net, apnic.net, afriinc.net and arin.net to do research for networks.
-
Dim Kas
commented
This and clamav should significantly improve server safety
-
Joao
commented
Just use this script: https://github.com/trick77/ipset-blacklist
-
Paco
commented
Hi there.
Would be a verny "nice to have". I really hope the guys at Plesk get around to this this year ! ! ! -
Anonymous
commented
maybe everyone will block russian traffic, so sensitive for plesk owners,
-
Anonymous
commented
it will be very appreciated !
-
Anonymous
commented
It would be very appreciated!
We can all save bandwidth. -
Emilio Escamilla commented
Hey Adam, try to set you SPF with -all (minus sign). And make you sure to have only sender server IP or service included on your spf.
-
Adam
commented
PLEASE get country IP blocking or bulk IP blocking abilities. At times I am getting up to 45,000 spoofed emails (spoofed from my own account) a day. SPF records and DKIM settings just don't work!
-
Anonymous
commented
I have a lot of spam from .ru and never need to get .ru emails so I would love to be able to block them. Our business is Australian based.
-
Koray Dolgun
commented
This feature is free at cpanel. why plesk is not doing this.??
-
Giorgio M.
commented
Wow! 5 years and nobody at Plesk thought to implement this feature. From a paid panel I expected more...
-
Daniel Hendricks
commented
I feel like it would be nice to configure per site? For example, if I have a web site where I don't feel like listing every cookie and possible impact of linking to CDNs for various assets to comply with GDPR (They're logging my IP address! Get or set up a ch€ap VPN if that bothers you), it would be convenient to block affected countries. I certainly wouldn't want to do this for every site, but it would be nice to be able to push a button (so to speak) for sites where I don't care about European traffic. I'm not suggesting a "block GDPR traffic" button in the admin (that would be silly), but perhaps a way to more easily group rubbish traffic by type?