Block Port 8443

[LloydD]

H there,
I am trying to achieve PCI Compliance, I have run the PCI Compliance resolver but I am still failing on the Plesk Port 8443.
Our VPS is only used for one site, as such I don't have to allow anyone into Plesk.
I had hoped that stopping PSA from SSH would stop this port operating but it hasn't so I want to stop Plesk and block port 8443 from the Parallels Power Panel Firewall what would be my best bet for achieving this?
I would like to block all incoming on port 8443.
Thanks in advance for any help
Kind regards

Lloyd

 

[IgorG]

What about following?

# lsof -i tcp:8443
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
sw-cp-ser 44790 sw-cp-server 6u IPv4 6504694 TCP *csync-https (LISTEN)

# /etc/init.d/sw-cp-server stop
Stoppping SWsoft control panels server... stale pidfile. [ OK ]

# lsof -i tcp:8443
# lsof -i tcp:80
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
httpd 30272 root 4u IPv6 6626723 TCP *:http (LISTEN)
httpd 64545 apache 4u IPv6 6626723 TCP *:http (LISTEN)
httpd 64546 apache 4u IPv6 6626723 TCP *:http (LISTEN)

 

[LloydD]

Hi, thanks for the fast response.
I am very new to linux, we run Ubuntu 8.04 with Plesk 9.5.2. Can I add the rule in the Power Panel Firewall? As I'm very nervous about screwing it up.
In the firewall it says

Source address -

what would that be for any & all external ips? For example when you block external mysql queries u allow only 127.0.0.1.
So is there a ip and netmask i can use to block all incoming ?
Thanks in advance for you help
Kind regards

Lloyd

 

[LloydD]

What about following?

So would your suggestion be ok on Ubntu/Plesk 9.5.2 ?
And How do I undo it when I need to get into Plesk?
Thanks for your help so far
Kind regards

lloyd

 

[IgorG]

Just run sw-cp-server back with

# /etc/init.d/sw-cp-server start

Plesk administration interface will be available again on port 8443.

 

[LloydD]

Hi again,
I finally tried this and security holes goes up, and still says this port is open.
What else can I try?
Thanks in advance for your help
Kind regards

Lloyd

 

[IgorG]

If you stop sw-cp-server - port 8443 will not be opened.