Block the IP of the selected country in Firewall
Firewall should be able to block the IP of the selected country. I have a lot of traffic from the IP 5.10. *. *
This functionality was added in Plesk 18.0.52 ( https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18052 ). We suggest you to update to Plesk 18.0.52 and check it out.
The feature is based on ipsets and works out of the box.
By default, the feature uses the free version of the DB-IP geolocation database, but also supports MaxMind DB's.
Feel free to share your feedback at at http://talk.plesk.com. --AA
-
dclprogramming commented
This would make the world a better place.
-
Masud Hussain commented
this is one of the feature which is missing in plesk.
-
Lotte Gaebel commented
the ability to manage and filter traffic at a country level is a great idea: implement a geoip service
-
Anonymous commented
Be able to block specific countries in Fail2Ban.
-
Joao commented
I am using IPSET with ipdeny for fetching countries´s IP blocks and it works great.
-
Fabian Salzwedel commented
Security via GeoIT-Functionality built in directly to plesk would bei
an awesome Feature. It would have saved me several lawsuits... -
Turab Garip commented
I think "Banning IP"s should be possible in a more broad way. It's already supported by iptables; so Plesk would need to implement only.
-
Anonymous commented
Tumbs Up
-
Bernhard commented
I would like it too, it is hard work to select attacks from china and then do it manually in firewall. I use GeoIp from Akeeba in my Joomla website and it works fine
-
Sven commented
GEO-IP Blocking is a good idea. With blacklisting or whitelisting. I have many traffic from china, malasiya, Japan and russia, but my target group is only Europe. And the Shops dont sell anything to this countries. A blocking is here a good idea to increase the security of the hole system.
-
Dennis Kracht commented
I think a general support should be implemented for all services. In a Fail2Ban service it would be nice to set configurations for other countries. In the mailserver it would be nice to enable Greylisting for specific countries (or even for SPF, DNSBL). Oh well i need greylisting for external ip adresses... In the modsecurity to harden or select other rulesets for other countries. The list could be long... :) Generally blocking IPs from other countries with a DROP might be helpful, but blocking under certain cercumstances would be king...
-
Jon commented
I would be happy to have a quick way within the panel to block a IP or IP block, such as what I have to login via ssh and do via IP tables... Like
iptables -I INPUT 34 -s 14.0.0.0/9 -j DROP -
Don Jones commented
I have the same issue. Most of the traffic is from Latvia subnets. I just add a firewall rule to deny all from those subnets. Takes a while to add them all though. Should be an easier block list method through the GUI.
-
Anonymous commented
you can easily do this with modsecurity, in my case I use comodo rules
-
Fetchman commented
Urgently some GEOIP Blocker is necessary, to avoid any contact from other countries to blocking spammers and useless try outs to login.
-
Juergen Trapp commented
Use mod_geoip2 and you can block the country. Its simple!!!
-
wikrie commented
I do this with the help of a small perl script
https://github.com/tlhackque/BlockCountries
so for me this works perfectly ...
-
Anonymous commented
exellent idea
-
Anonymous commented
exellent idea
-
Danami commented
Just a note that we support country blacklisting and whitelisting via our Juggernaut Security and Firewall Plesk addon:
http://www.danami.com/products/plesk-addons/juggernaut-security-and-firewall