Block access to :2083 and :2087 for addon domains

blade304

• December 16, 2024 18:23

Hi, I want to block access to WHM and cPanel login pages for account and addon domains, so that:

http://addon.tld:2083

https://addon2.tld:2087

would be blocked. And I only want to allow access for one domain (host.serverdomain.tld).

What should the rule for this be in ModSecurity?

• 

  cPRex Jurassic Moderator

  • December 16, 2024 18:50

  Hey there!  There isn't a way to do this in cPanel - any IP address or domain that points to your server will be able to access the cPanel ports as they listen for all connections.

  0
• 

  blade304

  • December 16, 2024 19:53

  Hi cPRex,

  Thanks for the info. So how do you recommend doing this, can it be done in CSF on a server with one IP?

  0
• 

  cPRex Jurassic Moderator

  • December 16, 2024 20:50

  cPanel doesn't provide or distribute CSF, so I can't say what that tool may be able to do.

  I can say that anything that is directed to your server - whether that be a domain name or IP address - will respond with the cPanel ports by default.  There is likely a way to make these changes with custom firewall rules, but since that isn't something we support I haven't been asked this in the past, and I'm not sure what those rules may be.

  0

Please sign in to leave a comment.