dongrou839975 2016-03-19 13:57
浏览 94
已采纳

如何保护Plesk管理面板？

I want to know how to secure the Plesk admin panel. In fact, for acces to this admin panel, you must use this link : https://<server ip address>:8443

But there is no security, https is not activate, there is no recaptcha so hacker can use brute force ..

Have you any tips to secure all that ?

Thank you

  • 写回答

1条回答 默认 最新

  • douyong1886 2016-03-20 09:32
    关注

    Since Plesk 12 there is a fail2ban* with "plesk-panel" jail which block password bruteforce attacks on admin panel.

    Also you can install "Google Authenticator" to add two-factor authorization and "Clef Authentication" extension which replace plesk auth to auth with mobile phone. Also there is old school "Restrict Administration Access" which just allows authorization for admin user(only) from white list of IP addresses

    plesk fail2ban, two-factor authoization

    * - fail2ban may be not installed or there is license restriction(check "License management" page for "fail2ban" option)

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题？