How to deny access to WHM via Host Access Control on Ubuntu

Introduction

This guide provides a basic example for blocking access to WHM for all IP addresses except the specific IPs that you allow from the "Host Access Control" interface in WHM.

Before making changes in this interface, you must ensure that you know how to access your server via the console. If this interface is configured incorrectly, you can completely block yourself from accessing the server. In the event that you have completely blocked yourself from accessing the server, you would need to regain access by using console access. Obtaining and using console access is not supported by cPanel because it is configured and provided by your hosting provider or systems administrator.

Procedure

1. Log into WHM as the ‘root’ user.
2. Navigate to "Home / Security Center / Host Access Control."
3. Remove all existing rules unless you know exactly how they will interact with the rules outlined in this guide.
4. On the first empty line, enter whostmgrd in the "Daemon" column.
5. On the same line, enter ALL EXCEPT 203.0.113.2 in the "Access List" column.
   Please note that "203.0.113.2" must be replaced with your IP address or subnet.
6. On the same line, enter deney in the "Action" column.
7. Scroll to the bottom of the page.
8. Click the "Save Host Access List" button.

Additional resources

Host Access Control: Allow or deny access

What does "console access" mean?

How to deny access to WHM via Host Access Control on a RHEL-based server