• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Search results

  1. David Jimenez

    Resolved Spam black list not working

    So, I did a server-wide spam blacklist on *@*.ru, which is where almost all of the MAILER-DAEMON stuff is coming from. It is still coming through. So, I guess Plesk's settings for spam blacklists do not work or wildcards don't work as described. (also added it direct to the advanced settings...
  2. David Jimenez

    Resolved Spam black list not working

    We have an email address that is just a forwarder. Plesk allows us to turn spam filtering on for that forwarder. In advanced settings, we have added MAILER-DAEMON@* to the blacklist as someone is spoofing that email address in their spam blasts. However, even after adding the black list, the...
  3. David Jimenez

    Resolved How to stop mail failure notifications

    After a lot of research, it appears this can't be done easily if at all.
  4. David Jimenez

    Resolved How to stop mail failure notifications

    The search function only works if you have the exact phrase that someone else used if they had the same problem. I always do a search first and, in this case, I received 2 pages of possible links. None of those were about my issue and some were about Fail2Ban...Our email services are setup...
  5. David Jimenez

    Resolved How to stop mail failure notifications

    We have our email settings to only allow incoming emails to defined email accounts. All other email addresses get a returned message that there is no such user. We do not have the "forward to" address enabled for those messages. However, we are getting a lot of annoying (and useless)...
  6. David Jimenez

    Resolved Just moved to Onyx, Help with Spam Filter Setting

    Thanks. The delete function was set for each mail box and not a global function.
  7. David Jimenez

    Resolved Just moved to Onyx, Help with Spam Filter Setting

    We just moved from Plesk 12.x for Linux to Plesk Onyx. I may be confused, but I remember a spam setting that allowed me to choose whether to pass along spam (marked as such) or to have the spam deleted instantly. I can't find any settings in Onyx that would allow me to make that choice. We...
  8. David Jimenez

    Question Plesk updates keep failing

    Plesk keeps issuing warnings that it wasn't able to update and to send the logs to Odin support. Can anyone tell me the right place to send the latest log? Thanks
  9. David Jimenez

    Question Help understanding Fail2Ban log entry

    Unfortunately, we have a number of customers that use IPv6, so shutting that down isn't an option. Any advice on installing the Fail2Ban Beta?
  10. David Jimenez

    Question Help understanding Fail2Ban log entry

    Thanks. Since most of the attacks are trying SSH, is setting "Access to the server over SSH" to "Forbidden" an alternative? We don't use SSH and could always turn it back on if needed.
  11. David Jimenez

    Question Help understanding Fail2Ban log entry

    Here is another question. There is one IP address that is already in jail with a ban period of 1 week. Yet, while this IP address is in recidive it still pounds our server with thousands of hits that look like they are trying a phone book for usernames. I would have thought that once you are...
  12. David Jimenez

    Question Help understanding Fail2Ban log entry

    Single web site, one subdomain, and a couple of forms using Machform using 3GB of disk space. Network Solutions VPS, but they only allocate 1GB of DRAM. Normally, the resource shows about 25% memory usage. What may be more of an issue is that they set numiptent to 128 and absolutely refuse to...
  13. David Jimenez

    Question Help understanding Fail2Ban log entry

    Maybe this adds more clarity on the BAN side: 2017-04-14 16:26:09,066 fail2ban.filter [28873]: INFO [ssh] Found 67.245.245.69 2017-04-14 16:26:12,079 fail2ban.filter [28873]: INFO [ssh] Found 67.245.245.69 2017-04-14 16:26:14,088 fail2ban.filter [28873]: INFO [ssh] Found 67.245.245.69...
  14. David Jimenez

    Question Help understanding Fail2Ban log entry

    The "normal" log entries are pretty easy to understand, they go something like this: 2017-04-15 16:33:53,497 fail2ban.filter [28873]: INFO [ssh] Found 218.0.241.177 2017-04-15 16:33:55,508 fail2ban.filter [28873]: INFO [ssh] Found 218.0.241.177 2017-04-15 16:33:57,517 fail2ban.filter [28873]...
  15. David Jimenez

    Resolved Help with shutting down SSH

    Actually, the default log that ssh jail is monitoring is /var/log/secure. That is why I was seeing Fail2Ban actions in its log and the activity in the secure log.
  16. David Jimenez

    Resolved Help with shutting down SSH

    Yes, I understand that Fail2Ban is looking at its own logs to find offenders. The question is would you expect a failed SSH attempt to show up in both the Fail2Ban log and the Secure log? If so, no problem. I just want to better understand what is being logged and by which system.
  17. David Jimenez

    Resolved Help with shutting down SSH

    Another question, is there some reason that an SSH attack should show up both in var/log/secure and var/log/fail2ban?
  18. David Jimenez

    Resolved Help with shutting down SSH

    All the jails are active: plesk-apache Active plesk-apache-badbot Active plesk-courierimap Active plesk-panel Active plesk-postfix Active plesk-proftpd Active plesk-wordpress Active recidive Active ssh Active Both recidive and ssh have IP addresses in their respective jails. Whitelist handled...
  19. David Jimenez

    Resolved Help with shutting down SSH

    I was able to get Fail2Ban up and running. There were some new SSH hits after I started Fail2Ban, but nothing in the past hour. Apr 13 17:10:41 03f98ae proftpd[30046]: 205.178.137.143 (208.100.26.232[208.100.26.232]) - USER ftp (Login failed): Incorrect password Apr 13 17:25:30 03f98ae...
  20. David Jimenez

    Resolved Help with shutting down SSH

    I answered that in the original thread where you made that suggestion. Network Solutions set numiptent at 128, which is barely enough to get our iptables to work. If I add Fail2Ban or Plesk Firewall, we run out of that resource and the server becomes unstable. We asked NS to increase that...
Back
Top