An access-list is a list of rules, usually held on network devices such as switches, routers or firewalls, that matches network traffic. The specific term 'access-list' is used in the context of Cisco devices, although the concept of an 'access list' is more generic.

learn more… | top users | synonyms (3)

0
votes
1answer
21 views

SMTP network ACL on AWS

I have a very restricted ACL for my VPC. We have a public subnet and a private subnet, each subnet has its own individual ACL. What I don't understand is why the following ACL works for sending email ...
0
votes
0answers
27 views

How to set the minimum acl permissions for an user who is included in two or more user groups with different permissions in linux?

Say, I have two groups G1 and G2 with user1 as member to both. G1 has rwx permission on a file file1 and G2 has only read permission on the same file. Setting G2 as the primary group for user1 does ...
3
votes
1answer
53 views

Broken ACLs when “zfs send”ing a snapshot from a Linux machine to Solaris

I'm running ZFS on a Ubuntu machine that hosts our home directories. The pool has the following ACL setting: # zfs get all homes | grep acl homes aclinherit restricted default ...
0
votes
0answers
14 views

dovecot shared folders (acl with mysql) can't be subscribed

For some reason the folder Project Folders is not selectable. Practically every public or shared folder is not selectable. The Email client is Thunderbird. # 2.1.17: /etc/dovecot/dovecot.conf # OS: ...
0
votes
0answers
8 views

Network ACL configuration for IPsec in AWS

Running in to a bit of a brick wall with this: I have 2 AWS VPC's which I have peered using an IPSec VPN. Traffic works using this tunnel no problems. I am now looking at introducing NACLs in the VPC ...
-1
votes
0answers
25 views

How to enable port forwarding to get some TCP services

As image showing the scenario, I need a suggestion to get (http/https/pop3/smtp) access for the network(192.168.0.9) through the internet/Email server(192.168.0.123) placed on the other side of my ...
1
vote
1answer
41 views

Filtering even ip address from a router

Is there a way to filter out even(or odd) numbered IP address from passing through a router (I am working with the cisco packet tracer) using access lists or any other methods? Thank You
1
vote
0answers
18 views

LDAP ACL for restricting applications with same user dn

Currently we need to configure Group based LDAP login for our custom applications. We have applications named app1, app2 etc. For restricting users to login for a particular application for eg app1 ...
2
votes
2answers
57 views

What is an open DNS resolver, and protect from dns amplification?

I was wondering if I limit ACL access to my nameservers that allow recursive, the worst that could happen is someone launching a dns amplification on any of the allowed host in the ACL? For example: ...
0
votes
0answers
20 views

NTFS Permission error

I am having issue with a folder permission which i am not able to access. when i hit on the folder security tab in the properties it showed me grayed out all the options, and gave me this error "you ...
0
votes
0answers
5 views

Squid : different acl for different kind of authentication

I am using a 2.7 Squid stable 9 with NTLM authentication. But with some tools (like adobe cloud), the connection use Basic auth param, which is not configured in my squid.conf. So I would like to ...
0
votes
0answers
20 views

Excluding a file from an IP block

I have recently converted a pre-2.4 configuration to Apache's new authorisation configuration but ran into a problem/misunderstanding concerning more than one RequireAll block. What I am basically ...
1
vote
1answer
31 views

Read permission denied to user with ACL group permission to read

Introduction A common scenario for a web application that it has two general folders. One filled with code which is executed by the application server, for example uwsgi, and one with static content ...
0
votes
0answers
22 views

RequireAll blocks overriding each other [duplicate]

I have recently converted a pre-2.4 configuration to Apache's new authorisation configuration but ran into a problem/misunderstanding concerning more than one RequireAll block. What I am basically ...
0
votes
0answers
33 views

ICMP DDoS, proper ACL?

We are having about a 3-4Gbps ICMP flood on one of our servers and I wonder.. I have a 20gbps of DDoS protection but the proetction seems ineffective against ICMP funnily (it worked well to block a ...
0
votes
1answer
26 views

OpenLDAP extend ACL properly

I have a fresh installed server with this in it: How should I extend the ACL to give a specific user write access a description property under a specific subtree of items? More specificly I want to ...
1
vote
1answer
31 views

Distribution Group used for NTFS permissions?

I know that this is technically not possible except for mail-enabled security groups, so I'm a little confused. We had users complain about losing access to a share. Looking at the ACL, I saw the ...
0
votes
1answer
18 views

Default mode parameters affecting ACL permissions

I have just started working as sysadmin and encountered my first problem. What I am trying to do is set permissions of a directory so that all the subdirectories and files in the directory AND newly ...
1
vote
1answer
61 views

Permissions issue: why is user nobody needed in my second php-fpm pool?

I am running FreeBSD 10.2 with a custom-compiled Apache 2.4.17 with php-fpm. The default pool ([www], almost a stock php-fpm setup) ran on user/group nobody/nobody. Apache runs on user/group ...
-1
votes
1answer
177 views

How to share files/folders between users on same linux machine?

We have 2500+ users using linux thin clients with their home directory on a common NFS. We want Windows like file/folder sharing functionality between users. The users are not linked to any ...
1
vote
0answers
20 views

IIS Directory Browsing and forms authentication setting permissions

I have a website in IIS with directory browsing enabled (this is also an ftp site). I have recently switched to forms authentication instead of basic authentication. The root folder is accessible to ...
0
votes
1answer
60 views

How to prevent any ACL from NFS mount?

I'm trying to export/mount a NFS volume with no ACL at all (POSIX or NFS one), but I fail about that. Technical context: last current debian on both sides, ext4 volume. Goal: I enforce strict access ...
0
votes
1answer
36 views

How do I create a shared directory under root?

I'm trying to create a shared folder on my root partition that anyone in a particular group can read and write to and any new files within that folder are also read writeable by anyone in that group ...
0
votes
0answers
37 views

Correct permission strategy for Samba DC shares using ACL

I have Samba running as a DC at home. I'm in the process of migrating shares to using ACL's etc instead of the "basic" way of samba to handle permissions etc. On top of this I plan to run Greyhole ...
0
votes
1answer
139 views

Export/Import Active Directory Permissions Delegations

I have an OU in AD, which has delegated permissions assigned to it. Is there any way/tool to export delegated permissions (or just all security permissions) for an OU and then apply the very same ...
2
votes
1answer
46 views

NFS ACLs do not apply to root

I've been using CIFS for my networking for the longest time, and I'd like to use NFS for my Linux to Linux file distribution. I've got a share drive that I've set a sticky group on, which appears to ...
0
votes
0answers
26 views

Squid Proxy not correctly displaying web page

Currently working with Squid 3.3.8 on Ubuntu 14 and authorizing users against AD groups. Depending on AD group membership specific web sites are then allowed using dstdomain. LDAP_group ...
2
votes
0answers
75 views

Windows Server: Impact of high count of ACL entries on overall performance

I have been searching on this and just can't find enough information on the topic. We are trying to develop a custom folder / permission tool. The clients needs are quiet complicated as there will be ...
0
votes
0answers
4 views

IIS 7.0 File access control setting

I would like to allow only somebody to access some files via IIS 7.0. So I enabled basic authorization in IIS and disable anonymous one. Also I granted "Network" account to list and read the file ...
0
votes
1answer
26 views

permissions, access based enumeration

I have a service account that has full control of a sub folder deep into a share. Access based enumeration is enabled at the root of the share and this service account has 0 rights at the root. An ...
0
votes
1answer
36 views

Cisco ASA access-lists redundant entries

I need to modify existing configuration of the CISCO ASA. While analyzing the configuration I noticed something that looks redundant to me. I would like to see if somebody can confirm my doubts. ...
4
votes
3answers
167 views

How to prevent Alice to kill a process, but allow Bob to uninstall it?

I know Bob who is a system admin. Bob needs to deploy software Foo to Alice's work device based on Windows NT (XP onwards). Foo is security software. It is not malicious. Alice has local admin ...
2
votes
1answer
39 views

Is it safe to remount to enable ACL?

I want to enable ACL on the server with CentOS. I get this error "operation not supported" while running setfacl command and I noticed that even there is ext4 with defaults options in fstab file that ...
0
votes
1answer
91 views

Accessing share with ACLs using groups instead of explicitly granting user names not working?

I've setup a share on a windows server. \ServerName\ShareName. I've granted permissions for the share to "X Department". I also have an ACL for that "D:\FS\Sharename" folder granting "X Department" ...
0
votes
0answers
28 views

Setting attributes are not allowed by user while user_xattr mount option is present

/dev/mapper/vg-home on /home type ext4 (rw,relatime,user_xattr,barrier=1,data=ordered) When I try to set attributes with chattr +a +i etc on a file as a user I get back: chattr: Operation not ...
0
votes
0answers
37 views

Mutual Authentication - Allow from IP range without client certificate

Is it possible to set SSLVerifyClient: Require but, also allow IP range for users who do not have the client cert? Possibly to use: Order deny,allow Deny from all Allow from xxx.xxx.xxx.xxx ...
-1
votes
1answer
162 views

apache 2.2 order deny allow not working

this is driving me nuts. In a web server running httpd-2.2.15-45.el6.centos.x86_64 any type of does not seem to be honored. Example: <VirtualHost 192.168.10.10:80> ServerName ...
2
votes
1answer
68 views

ACL permissions not inherited

I have a Ubuntu 14.04 server with an EXT4 partition. I want to change what permissions new files and folders get when they are created in /home/myuser. I set some options with setfacl, and getfacl ...
0
votes
1answer
96 views

LDAP group access controls

I'm trying to set up our LDAP server so that members of the pwmadmins group can change people's passwords for them. To be more specific, we have PWM for Tomcat set up and are trying to let pwmadmins ...
1
vote
0answers
156 views

LDAP build script failing on openLDAP-2.4.31 ( ldapmodify -Y EXTERNAL -H ldapi:/// )

ORIGINAL QUESTION: I want to set the password to the backend admin so that I can change the LDAP ACL to what I need... needless to say I don't want my config posted all over the place, plus the .ldif ...
0
votes
0answers
148 views

Webmin: restricting DNS zones visible to a user per view not working?

I'm setting up my own webmin installation to manage a BIND9 DNS authoritative server hosting a few zones. The zones are separated into 2 views: internal and public. There are different groups of ...
0
votes
0answers
69 views

Samba4 creates unnecessary acl permissions on new folder

I am using samba4 ad dc on ubunut 14.04. When User user1 in Group group1 is creating a new folder in the directory \ADS\sysvol\ads.dns\newFolder, then the folder has the following ACL: $getfacl ...
0
votes
0answers
12 views

Maintain ability to set/unset group write permission with ACL

If I have a folder owned by root:www-data with rwxr-s--- permissions and set ACLs so that user john can modify files, the permissions of the folder are changed to rwxrws---+. Even though I assumed the ...
0
votes
1answer
183 views

Apache virtual host allow NOT overriding server allow

I am running Apache 2.4 and according to the documentation I found on the apache website (http://httpd.apache.org/docs/current/sections.html), under the section "How the sections are merged" it says ...
0
votes
0answers
60 views

File permissions for shared hosting environment

I am trying to set-up a shared hosting environment where users are given SFTP access to one or multiple folders. Consider the following scenario: /var/www/ holds several directories that represent ...
1
vote
1answer
96 views

How to control access to folders to a Windows VPN client session?

I have setup a Windows service role VPN all right. Next step is limit access of the VPN session user account. Some folders should be denied from client viewing (e.g.: system folders, program files, ...
0
votes
1answer
117 views

Port Forwarding with Cisco SR520 IOS

I've been tasked with setting up port forwarding for access to remote desktop on a server. I'm having trouble making it work. Server IP 192.168.1.20, port 3389 The router is a Cisco SR520. It is ...
1
vote
1answer
46 views

ACL - Subtree Admin should be able to modify password as well as the users themselves

dn: olcDatabase={1}hdb,cn=config objectclass: olcDatabaseConfig objectclass: olcHdbConfig olcaccess: {0}to dn.subtree="ou=subtree,dc=domain,dc=tld" by self write by dn="cn=subadmin,dc=domain,dc=tld" ...
0
votes
1answer
28 views

Make folder writable by multiple users via ACL

Is it possible to set the rights of a folder and all its files in such a way that multiple defined users can add, modify and remove files within? I was hoping to be able to do that via ACLs and I got ...
1
vote
3answers
93 views

Recursively removing write permissions in Windows?

Old Windows 2003 box holding shared folders that's being decommissioned. There's a folder being shared, inside this folder is one folder per user. Each folder has that user added to the security with ...