Question Server accessible internally only

[Daveo]

Server operating system version

Debian 12.12

Plesk version and microupdate number

18.0.74 #3

I've done some changes to make my home server accessible internally only, but it seems that it still accessible externally.

I have IP Access Restriction Management set to my internal network IP range and localhost (localhost is so the Plesk app still works).

Firewall is enabled.

I have set in each domain & subdomain's Apache & nginx Settings the following:

Deny: *
Allow: my internal network IP range

What else can I do, as I seem to be getting hits in Fail2Ban's ssh & recidive jails. At 36 so far on last check.

 

[scsa20]

How are you testing? Are you testing from outside the network?

Also make sure you don't have any public DNS servers set up pointing to your home IP and also make sure you don't have any ports up on your home firewall itself to forward to the server (you should be using your local DNS for everything).

 

[Daveo]

I've tested via my mobile's 4G data and that proves that I can't access any domain or subdomain. Also, tried to access plesk and that failed too (which I expected it to).

I have locked down SSH with a line in the config file that allows only my internal IP range (and as backup my external IP) to connect to SSH.

Just checking to make sure I've done all I can to stop people accessing server outside the network.

I've left DNS as Google's DNS, so that server can access updates, etc, as I don't have a local DNS server setup at the moment.

Only ports open are the ones plesk needs (8443/8447) and these are locked down to server IP address only.