<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Add custom rules to the Plesk firewall</title>
	<atom:link href="http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/feed/" rel="self" type="application/rss+xml" />
	<link>http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/</link>
	<description>Words of wisdom from a server administrator</description>
	<lastBuildDate>Sat, 11 Feb 2012 23:43:21 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Benjamin Hodgetts</title>
		<link>http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/#comment-26736</link>
		<dc:creator>Benjamin Hodgetts</dc:creator>
		<pubDate>Mon, 09 Jan 2012 11:34:19 +0000</pubDate>
		<guid isPermaLink="false">http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/#comment-26736</guid>
		<description>The Plesk Firewall rules make sense if you take apart the blob the write to their MySQL DB. The problem is, there are more than a few steps to it.

First, the rules you make in Plesk are written as blobs to the MySQL DB.
When you hit &quot;Apply&quot; in Plesk it writes out the rules into a bash script in the Plesk folder.
When the Plesk firewall service is restarted it applies the rules from this script to the live firewall (this is the bit that is overwriting the rules you&#039;re trying to manually add to the firewall yourself).

I&#039;ve managed to write MySQL queries to deal with part A, but there appears to be no command line way of doing the second stage (and modifying the bash script it creates is a little dangerous as there&#039;s no set structure to it or markers in place, your rules are likely to end up in the wrong place unless you enter them by hand).

In short - pain in the ass. As is always the way with Plesk.</description>
		<content:encoded><![CDATA[<p>The Plesk Firewall rules make sense if you take apart the blob the write to their MySQL DB. The problem is, there are more than a few steps to it.</p>
<p>First, the rules you make in Plesk are written as blobs to the MySQL DB.<br />
When you hit "Apply" in Plesk it writes out the rules into a bash script in the Plesk folder.<br />
When the Plesk firewall service is restarted it applies the rules from this script to the live firewall (this is the bit that is overwriting the rules you're trying to manually add to the firewall yourself).</p>
<p>I've managed to write MySQL queries to deal with part A, but there appears to be no command line way of doing the second stage (and modifying the bash script it creates is a little dangerous as there's no set structure to it or markers in place, your rules are likely to end up in the wrong place unless you enter them by hand).</p>
<p>In short - pain in the ass. As is always the way with Plesk.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jeffatrackaid</title>
		<link>http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/#comment-15859</link>
		<dc:creator>jeffatrackaid</dc:creator>
		<pubDate>Sat, 13 Feb 2010 13:35:55 +0000</pubDate>
		<guid isPermaLink="false">http://rackerhacker.com/2007/08/02/add-custom-rules-to-the-plesk-firewall/#comment-15859</guid>
		<description>I don&#039;t think this approach will work if you also want to use the Plesk interface?

The issue I have is that some clients use the Plesk firewall interface but I still need to add custom rules.  

Thus far, I&#039;ve not found a good way to handle this.  I peaked into the plesk database and I&#039;ve little clue how they right their rules. 

The only method I&#039;ve come up with was to create a custom chain and have a script to assure it is in as rule #1.</description>
		<content:encoded><![CDATA[<p>I don't think this approach will work if you also want to use the Plesk interface?</p>
<p>The issue I have is that some clients use the Plesk firewall interface but I still need to add custom rules.  </p>
<p>Thus far, I've not found a good way to handle this.  I peaked into the plesk database and I've little clue how they right their rules. </p>
<p>The only method I've come up with was to create a custom chain and have a script to assure it is in as rule #1.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

