Install the Plesk Firewall Module

Step 1:

Click "Tools and Settings" and then "Updates and Upgrades"

Step 2.

Click "Add Components"

Step 3.

Locate the "Plesk Firewall Extension" under "Additional Plesk Extensions" and check the box next to it

Step 4.

Click "Continue" and follow the instructions to complete the installation. 

Managing the Firewall

Accessing the Firewall Module is achieved by going to "Extensions" and then "Firewall"

The firewall is very powerful and caution should be taken when modifying it as it can be easy to make your server inaccessible to everyone, including yourself and CWCS Support. 

These options work best if you have a static IP address that you connect from as you can lock down services to a single IP making it near impossible for anyone other than
yourself the ability to access the server.

From within the Firewall extension click "Edit Firewall Configuration"

You can click any of the rules and edit them as you require

The options you have are:

Allow - Open to everyone

Deny - Blocked to everyone

Allowed from selected sources, deny from others - Blocks traffic to everyone except from ones specifically defined

When selecting "Allowed from selected sources, deny from others" you need to enter in the IP address you want to ACCEPT traffic from such as the IP address used by your office in to the "Add IP address or network" field and then click "Add", repeat this for each IP and then click "Ok" when finished. 

Once you are happy with your changes click "Apply Configuration" to make the changes go live:

Creating your own rule

You can create your own rules to allow or deny access, either to a specific port, or network or a combination of both. 

As an example lets say you know an IP address that you want to block from accessing your server

Start by clicking "Add Custom Rule"

Then in the "Name of the rule" field type in "Blocked"

Match Direction - would be set to "Incoming" as we want to block the traffic coming into the server

Action -  set to "Deny"

Ports - Leave this as it is, as we want to block any type of traffic

Sources - Enter in the IP address you want to block and click "Add", repeat this for each IP you want to block

Click "Ok" to finish adding the rules

Click "Apply Configuration" to load the rules and make them live