Results 1 to 7 of 7
  1. #1
    Join Date
    Jun 2014
    Posts
    90

    * Plesk not finish updating, I think it is the CSF Firewall

    Hello everyone.
    Now every day I passed the same problem and Plesk does not update correctly.
    Anyone know how I can update it from SSH console please?
    I think I have some port that is blocking CSF Plesk.
    Thank you very much.


    http://www.webhostingtalk.com/showth...23#post9272223

    Old conversation:

    Hello, last night I got an email saying that plesk could not be updated.
    And now I can not access I get the following error: 502 Bad Gateway

    My Plesk is Linux 11
    If anyone can help me please, thank you very much.
    Solvented:

    Plesk isn't running. Restarting psa should fix.

    'service psa restart'
    http://www.webhostingtalk.com/showth...23#post9272223

  2. #2
    Join Date
    Jun 2014
    Posts
    90

    *

    I have the following ports open if it is helpful.
    To automatically update Plesk.
    I have Plesk version 11.5.30.
    And seems to want to upgrade to version 12.0.18


    # Allow incoming TCP ports
    TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,69,5224"

    # Allow outgoing TCP ports
    TCP_OUT = "20,21,22,25,53,80,110,113,443,5224"


    Click image for larger version. 

Name:	12.png 
Views:	1 
Size:	39.1 KB 
ID:	29493




    Click image for larger version. 

Name:	d2.png 
Views:	0 
Size:	33.3 KB 
ID:	29494

  3. #3
    Can you disable CSF and try running the plesk update after?

    In SSH run command > csf -f
    Next run Plesk Update
    Then start it again by> csf -s

    If it works then you know it was CSF Also depending on your security settings sometimes you need to whitelist IP's (in this case the Plesk server updates are trying to be grabbed from)

  4. #4
    Join Date
    Jun 2014
    Posts
    90
    Hello, your solution is perfect, the problem was fixed.
    Thank you very much !!!

    I just need to know which ports are used to upgrade Plesk to add it to the whitelist.

    Thank you very much master.

  5. #5
    Hi,

    I personally would not advise using CSF on a plesk server. Plesk has its own integrated firewall, that is the best.. Check the below TCP ports enabled, you don't have standard Plesk ports 8880, 8443, and most important 8447 needed for Plesk update added in this.

    -------------------------------
    # Allow incoming TCP ports
    TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,69,5224"

    # Allow outgoing TCP ports
    TCP_OUT = "20,21,22,25,53,80,110,113,443,5224"
    -------------------------------

    Remove the CSF and configure the Plesk in-built firewall.
    www.24x7servermanagement.com
    Server Management, Server Security, Server Monitoring.
    India's Leading Managed Service Provider !! Skype: techs24x7

  6. #6
    Join Date
    Jun 2014
    Posts
    90
    Hello Srv24x7.
    Thank you very much for your help and sorry for delay in responding.
    Do not use the plesk firewall why not block countries like China as they always attack my server.
    And so now I have put csf.
    Thanks for the port.

  7. #7
    Hi,

    Okay, when it comes to blocking the country, you can then rely on CSF, as it does very good job of blocking the traffic as configured in CC_DENY.

    In addition, you can also use the fail2ban.
    www.24x7servermanagement.com
    Server Management, Server Security, Server Monitoring.
    India's Leading Managed Service Provider !! Skype: techs24x7

Similar Threads

  1. Manual edit csf firewall csf.allow or csf.ignore?
    By hostyourdream in forum Hosting Software and Control Panels
    Replies: 8
    Last Post: 09-14-2015, 06:31 PM
  2. Replies: 4
    Last Post: 07-21-2014, 09:37 PM
  3. Windows 2008 Firewall vs Linux CSF Firewall?
    By Think Tank Networks in forum Dedicated Server
    Replies: 9
    Last Post: 08-03-2012, 01:09 PM
  4. Plesk firewall blocking port 8880? Plesk vs Virtuozzo firewall?
    By kpmedia in forum Hosting Security and Technology
    Replies: 4
    Last Post: 06-22-2012, 10:34 AM
  5. CSF Firewall: Edit csf.deny, the IP address deny file Currently:1000 permanent IP ban
    By crazyaboutlinux in forum Hosting Security and Technology
    Replies: 12
    Last Post: 02-09-2011, 02:08 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •