Applicable to:
- Plesk for Linux
- Plesk for Windows
Symptoms
It is not possible to log in to Plesk as a Plesk administrator with the following message:
PLESK_ERROR: Access for administrator from address 203.0.113.2 is restricted in accordance with IP Access restriction policy currently applied.
Cause
The current Plesk IP access policy does not allow to log in from a particular IP address.
This setting is configured in Plesk at Tools & Settings > Restrict Administrative Access.
Resolution
Apply one of the following solutions:
-
Connect to the Plesk server via SSH (Linux) / RDP (Windows Server).
-
Add your IP address to the allow list (on Windows Server, use command prompt as an Administrator):
# plesk db "INSERT INTO cp_access (type, netaddr, netmask) VALUES ('deny' , '203.0.113.2', '255.255.255.255')"
- where 203.0.113.2 - the IP address of a device from which you are accessing Plesk
-
For Plesk on Linux
-
Connect to the Plesk server via SSH.
-
For security reasons, create a dump of the Plesk database.
-
Clear the access policy settings:
3.1. Remove all records from the "cp_access" table:
# plesk db "DELETE FROM cp_access"
3.2. Set the policy to allow:
# plesk db "UPDATE misc SET val='allow' WHERE param='access_policy'"
-
-
For Plesk on Windows Server
-
Connect to the Plesk server via RDP and start a command prompt as an Administrator.
-
For security reasons, create a dump of the Plesk database.
-
Clear the access policy settings:
3.1. Remove all records from the "cp_access" table:
C:\> plesk db "DELETE FROM cp_access"
3.2. Set the policy to allow:
C:\> plesk db "UPDATE misc SET val='allow' WHERE param='access_policy'"
-
Comments
2 comments
Hi Kuzma Ivanov,
Are you sure it's a "deny" in the CLI for an IP to e allowed?
plesk db "INSERT INTO cp_access (type, netaddr, netmask) VALUES ('deny' , '203.0.113.2', '255.255.255.255')"Hi Ehud Ziegelman ,
From what I can tell, although the wording is a little counter intuitive, a record with a “deny” type means it belongs to the “Denied from the networks that are not listed” policy, where as an “allow” IP belongs to the alternate “Allowed, excluding the networks in the list” policy. Only one policy can be active at once.
Please sign in to leave a comment.