How to manage ports and firewall rules on Plesk for Linux server

Question

How to manage ports and firewall rules on Plesk for Linux server?

Answer

Using Plesk Interface

Go to Plesk > Tools & Settings > Updates & Upgrades. In extensions section, select Plesk Firewall for installation.

After installation, go to Tools & Settings > Firewall > Enable Firewall Rules Management 

Manage firewall rules in Plesk directly:

Using SSH connection

1. Connect to the server using SSH
2. Execute the commands below to add rules to the firewall configuration, as example, ports 8443 and 8880:

   For SystemV based OSes and SystemD where firewalld is disabled:

   • To allow connection to ports:

     # iptables -I INPUT -p tcp --dport 8443 -m state --state NEW -j ACCEPT
     # iptables -I INPUT -p tcp --dport 8880 -m state --state NEW -j ACCEPT

   • To forbid connection to ports:

     # iptables -I INPUT -p tcp -s 203.0.113.2 --dport 8443 -j DROP
     # iptables -I INPUT -p tcp -s 203.0.113.2 --dport 8880 -j DROP

   • To commit changes:

     # service iptables save

   Note: If it does not work for your OS, try the next one.

    

   For SystemD based OSes where firewalld is enabled:

• To allow connection to ports:

  # firewall-cmd --zone=public --permanent --add-port=8443/tcp
  # firewall-cmd --zone=public --permanent --add-port=8880/tcp

• To forbid connection to ports:

  # firewall-cmd --zone=public --permanent source address='203.0.113.2' port protocol='tcp' port='8880' reject
  # firewall-cmd --zone=public --permanent source address='203.0.113.2' port protocol='tcp' port='8443' reject

• To commit changes:

  # firewall-cmd --reload