Results 1 to 7 of 7
-
10-26-2014, 07:14 AM #1Junior Guru Wannabe
- Join Date
- Jun 2014
- Posts
- 90
Plesk not finish updating, I think it is the CSF Firewall
Hello everyone.
Now every day I passed the same problem and Plesk does not update correctly.
Anyone know how I can update it from SSH console please?
I think I have some port that is blocking CSF Plesk.
Thank you very much.
http://www.webhostingtalk.com/showth...23#post9272223
Old conversation:
Hello, last night I got an email saying that plesk could not be updated.
And now I can not access I get the following error: 502 Bad Gateway
My Plesk is Linux 11
If anyone can help me please, thank you very much.
Plesk isn't running. Restarting psa should fix.
'service psa restart'
-
10-26-2014, 07:35 AM #2Junior Guru Wannabe
- Join Date
- Jun 2014
- Posts
- 90
I have the following ports open if it is helpful.
To automatically update Plesk.
I have Plesk version 11.5.30.
And seems to want to upgrade to version 12.0.18
# Allow incoming TCP ports
TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,69,5224"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,5224"
-
10-26-2014, 09:42 AM #3Disabled
- Join Date
- Dec 2007
- Posts
- 381
Can you disable CSF and try running the plesk update after?
In SSH run command > csf -f
Next run Plesk Update
Then start it again by> csf -s
If it works then you know it was CSF Also depending on your security settings sometimes you need to whitelist IP's (in this case the Plesk server updates are trying to be grabbed from)
-
10-26-2014, 06:32 PM #4Junior Guru Wannabe
- Join Date
- Jun 2014
- Posts
- 90
Hello, your solution is perfect, the problem was fixed.
Thank you very much !!!
I just need to know which ports are used to upgrade Plesk to add it to the whitelist.
Thank you very much master.
-
10-27-2014, 09:16 AM #5Web Hosting Master
- Join Date
- Oct 2007
- Posts
- 2,349
Hi,
I personally would not advise using CSF on a plesk server. Plesk has its own integrated firewall, that is the best.. Check the below TCP ports enabled, you don't have standard Plesk ports 8880, 8443, and most important 8447 needed for Plesk update added in this.
-------------------------------
# Allow incoming TCP ports
TCP_IN = "20,21,22,25,53,80,110,143,443,465,587,993,995,69,5224"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,5224"
-------------------------------
Remove the CSF and configure the Plesk in-built firewall.www.24x7servermanagement.com
Server Management, Server Security, Server Monitoring.
India's Leading Managed Service Provider !! Skype: techs24x7
-
10-30-2014, 08:37 AM #6Junior Guru Wannabe
- Join Date
- Jun 2014
- Posts
- 90
Hello Srv24x7.
Thank you very much for your help and sorry for delay in responding.
Do not use the plesk firewall why not block countries like China as they always attack my server.
And so now I have put csf.
Thanks for the port.
-
10-31-2014, 10:29 AM #7Web Hosting Master
- Join Date
- Oct 2007
- Posts
- 2,349
Hi,
Okay, when it comes to blocking the country, you can then rely on CSF, as it does very good job of blocking the traffic as configured in CC_DENY.
In addition, you can also use the fail2ban.www.24x7servermanagement.com
Server Management, Server Security, Server Monitoring.
India's Leading Managed Service Provider !! Skype: techs24x7
Similar Threads
-
Manual edit csf firewall csf.allow or csf.ignore?
By hostyourdream in forum Hosting Software and Control PanelsReplies: 8Last Post: 09-14-2015, 06:31 PM -
OVH Firwall, CSF FIrewall, CLoudflare Firewall unable top block ipv6 address
By XxUnkn0wnxX in forum Dedicated ServerReplies: 4Last Post: 07-21-2014, 09:37 PM -
Windows 2008 Firewall vs Linux CSF Firewall?
By Think Tank Networks in forum Dedicated ServerReplies: 9Last Post: 08-03-2012, 01:09 PM -
Plesk firewall blocking port 8880? Plesk vs Virtuozzo firewall?
By kpmedia in forum Hosting Security and TechnologyReplies: 4Last Post: 06-22-2012, 10:34 AM -
CSF Firewall: Edit csf.deny, the IP address deny file Currently:1000 permanent IP ban
By crazyaboutlinux in forum Hosting Security and TechnologyReplies: 12Last Post: 02-09-2011, 02:08 AM