The tag has no wiki summary.

learn more… | top users | synonyms

27
votes
16answers
27k views

Why Block Port 22 Outbound?

I'm a programmer, and I have worked for a few clients whose networks block outgoing connections on port 22. Considering that programmers often need to use port 22 for ssh, this seems like a ...
12
votes
10answers
4k views

Block Facebook for selected users

We have a few users here who are using Facebook during working hours and their productivity is through the floor, as a temporary measure I have remotely edited their hosts files to point facebook.com ...
8
votes
2answers
6k views

MySQL InnoDB database 'hangs' on selects

I'm trying to fix MySQL configuration on our server. Our app's specifics is that a lot of data is stored in single table (currently over 300 millions of rows). This table is used often for inserts ...
4
votes
1answer
310 views

How to check if a process is non-blocking in linux without using a stack tracer?

A multi-cpu server is running several processes. One process has a thread that should always be in a spinning state, using 100% of the CPU it's been assigned. My current method (besides asking the ...
4
votes
3answers
336 views

Can i safely block all ports on my sever

I have a web server running pleks and get attacked a lot every day. I configured a firewall, and there are some predefined services such as www, and ftp, etc. I am planning to block all the ports ...
4
votes
1answer
1k views

Block a website on HTTPS and allow it on HTTP (to enforce Safesearch)

I would like to block some websites on their HTTPS version and allow them on HTTP. The main websites involved are Youtube and Google Images/Videos. This is because on the HTTP version, I can enforce ...
3
votes
6answers
2k views

How can I block access to my website from certain countries using the LAMP stack?

I have a website that I do not want to be viewed by entire countries. The website is running on a LAMP server. How can I achieve this?
3
votes
1answer
222 views

Apache IPv4 deny directive blocks IPv6 addresses

Edit I have thought that excessive number of "deny" lines are confusing apache into blocking unlisted IPv4 addresses. But comment of @Ladadadada made me pinpoint the exact issue. You can read my old ...
3
votes
2answers
1k views

Are there internet users connecting with HTTP/1.0?

Are there internet users connecting with HTTP/1.0? Such as over a proxy. Because I'm going to block HTTP/1.0 since most of the bots are using HTTP/1.0.
3
votes
1answer
3k views

Linux kernel crash - any ideas?

Been getting these runaway conditions on a lightly loaded vps (debian squeeze kernel 2.6.38-bpo.2-amd64, 2GB, SSD) - top load is nothing , then jumps to 30.0 & everything grinds to a halt. I'm ...
2
votes
5answers
515 views

Block ssh tunneling navigation in my LAN

I would like to stop people bypassing Opendns and squid proxy blocks to get on facebook using ssh tunnel to their pc home. I know I can fix this talking to boss but I'd also like to understand better ...
2
votes
3answers
447 views

block websites in our network

We would like to block users from accessing sites like facebook and all from our network. All the connections are through our router(linux machine). What would be the best way to block the sites on ...
2
votes
2answers
359 views

Blocking rm -rf for application

I have application which during run-time generates interesting intermediate outputs to ./tmp directory. At the end of execution this directory is deleted. How can i preserve contents of it? I do not ...
2
votes
3answers
10k views

Squid: how to block websites for a particular IP address?

How to block websites for particular IPs by squid? Please give solution with example or configuration file.
2
votes
2answers
51 views

Can I restrict access to an apache website to a client whose IP address is on an ISP who allocates IP addresses via DHCP?

I have a website which I want to use for administrative purposes. I need to be sure that only people from certain machines can log on. the problem is they are on ISP networks. Will I truely get the ...
2
votes
2answers
3k views

Separate Nginx access log file for certain requests only

As far as I can see Nginx supports by default 2 log files: error_log (tracks issues related to the Nginx server itself) and access_log (tracks requests processed by Nginx). Whilst it is possible to ...
2
votes
2answers
4k views

How to configure a network to block gmail but allow google apps mail?

Google app mail loads via http://mail.google.com/a/[domain] and gmail loads via http://mail.google.com/mail. How can I block computers on my LAN from accessing gmail urls but at the same time permit ...
2
votes
3answers
4k views

SQL Alter database failed - being used by checkpoint process

On my SQL server 2008, i have a SQL agent job to restore a database on nightly basis. Procedure: find latest backup on other server Kill all conenction to the destination database Restore ...
2
votes
1answer
8k views

How can a block IP addresses using Windows Server 2008 firewall?

I have started to get various login attempts from different IP addresses. How can I block these IP addresses in the Windows Server 2008 Firewall?
2
votes
1answer
395 views

Block UDP traffic by rate/string-match on Windows 2008

I am administrating a Windows 2008 server (64-bit). It is being subjected to a focused set of DOS attacks where UDP packets are sent to a specific port and contain a specific string. What I need to ...
2
votes
2answers
110 views

Rejecting traffic where ACCEPT header is empty on favicon.ico requests

As part of filtering out potential harmful traffic, I currently reject traffic where $_SERVER["HTTP_ACCEPT"] is empty. I notice from my logs that a fair number of requests have been rejected due to ...
2
votes
3answers
409 views

Stop slowing down fast and verbose operations when using ssh over slow connections

I often copy many files between 2 servers connected via 1GBit ethernet while I am connected via VPN and SSH over DSL. The problem is, that the verbose output (1 line per copied file) which needs to be ...
2
votes
2answers
3k views

Log and Block Website using Windows 2008 SBS

A client has asked me to setup Windows 2008 SBS to block and log websites from a list they will provide. As far as I know they only have standard edition which means I cannot use ISA. I was thinking ...
2
votes
1answer
427 views

Administrator is being blocked by server - error 406?

Few days ago I put online new portal that comes with cms I made myself. Problem that occurred is following: Administrator logs to cms, publishes few news and then he can't access portal at all (whole ...
2
votes
1answer
104 views

Block specific client on CentOS by client name

I am looking at my Apache access log and there is suspicious activity from several ip ranges. What they have in common is that all of them are identified as "Allegro-Software-WebClient/4.07". Is ...
2
votes
2answers
347 views

I have a blocking transaction, but no statement is shown

My SQL Server 2008 started hanging on simple queries, so I checked for blocking transactions, using the built-in All Blocking Transactions report. Sure enough, such a transaction exists. However, if ...
2
votes
1answer
3k views

Disk IO causing high load on Xen/CentOS guest

Background I'm having serious issues with a xen based server, this is on the guest partition. It's a paravirtualized CentOS 5.5. I'm not sure if it's hardware or software related, or in between ...
2
votes
1answer
908 views

NFS-shared file-system is locking up

Our NFS-shared file-system is locking up. Please feel free to ask any questions you feel relevant. :) At the time, there are a lot of processes in "disk sleep" state, and the load averages on our ...
1
vote
2answers
363 views

How to ban potential hacker IP Addresses from Port 80?

I am hosting a bunch of PHP web sites on a web server. While I have taken all precautionary mesaures to protect all ports, Port 80 specific attacks continue. I want to ban any IP Address that taken an ...
1
vote
4answers
629 views

blocking bad websites in ISP level

how do you approach blocking bad websites such as malicious websites, porn and etc in ISP Level.
1
vote
1answer
187 views

How to block the Java installer?

We send PC's out to customers that need a very specific version of Java installed; specifically 6.26. I already disable the Java updater but I was wondering if I could block the customer from ...
1
vote
3answers
795 views

Block IPs in apache2

Ok another noob questions here. I have serveral IP's probing my server for phpmyadmin and other administrator stuff, looks like they're looking for something to hack, but honestly I don't care who ...
1
vote
3answers
1k views

How do I block all websites (except for a whitelist of 10 or so) for specific computers on a Windows domain?

I keep seeing references to something called Squid, but I take it that's only for Linux. Rather than needlessly pay $1,000+ bucks for a content filtering subscription on our firewall, I'm seeking an ...
1
vote
3answers
2k views

How do I Stop IE8 through WSUS

Currently I have a two domain enviroment of vista with all machines calling into WSUS. The with the recent advent of IE8 being avaliable through WSUS that's been great. However I want to stop IE8 ...
1
vote
1answer
13k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
1
vote
2answers
1k views

Use .htaccess to block *All* access to specific folders

I am not sure how to do this, but I want to block all access to a specific set of folders on my web server. Say secret01 and secret 02... homeDir |- data |- www | |- .htaccess (file) | |- ...
1
vote
2answers
401 views

MySQL SELECT query hangs

On my server I have 6 MySQL databases. They all power Wordpress websites. For some reason, 2 of these databases are not accessible. To my knowledge they use INNODB, but I can't confirm it as even ...
1
vote
3answers
5k views

How Do I Block an IP Address on ubuntu?

I have configured Ubuntu machine as router. Steps of NAT configuration are given below: #iptables -F #iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE #iptables-save ...
1
vote
2answers
463 views

Automatically block IP in apache2 - it is possible?

Is there are a way to automatically block IPs with apache2. For example, if we get a lot requests (100s) for non-existing pages (or known patterns, like CHANGE_LIST.txt, etc.) to block that IP and add ...
1
vote
2answers
825 views

Blocking a specific URL by IP (a URL create by mod-rewrite)

We need to block a specific URL for anyone not on a local IP (anyone without a 192.168.. address) We however cannot use apache's <Directory /var/www/foo/bar> Order allow,deny Allow from ...
1
vote
1answer
29 views

Firewall blocking files using Reg_Ex needs to be adjusted

We have security in our firewall to prevent SQL-Injection from destroying any of our content: Name Type Context Severity Pattern Configure CS:select_into signature http-url critical ...
1
vote
2answers
713 views

Apache VirtualHost Blockhole (Eats All Requests on All Ports on an IP)

I’m exhausted. I just spent the last two hours chasing a goose that I have been after on-and-off for the past year. Here is the goal, put as succinctly as possible. Step 1: HOSTS File: 127.0.0.5 ...
1
vote
1answer
204 views

Intercepting/blocking outgoing emails from mailx + phpmailer

I was wondering if anyone knows of a way to ideally intercept (if not block) mailx from sending emails? The situation is that we have a development server (CentOS) that hosts the current version of ...
1
vote
3answers
180 views

IPTables not blocking some connections

I am using IPtables for a basic firewall, I have placed some blocks on those IP's attempting FTP, SSH conenctions, etc. I have accept rules at the top for good measure to ensure that my monitoring ...
1
vote
1answer
556 views

Nginx: protect directory and files

I wrote this to prevent the directory "download" to be accessed but from the IP 1.2.3.4. location ~ /folder/download { allow 1.2.3.4; deny all; return 403; } However, the directory ...
1
vote
1answer
626 views

Need help with IP filtering and port forwarding

I have a static IP assigned to me by my ISP. I want to access a server running tomcat in our network from outside the LAN. Can any one give a few pointers, to what I need to do, and where to start ...
1
vote
2answers
173 views

Where is traffic destined for a specific TCP port being blocked?

I have a server that is set up to listen to a specific port (1433), and normally there is no problem accessing that port from anywhere. From one of the locations I work, however, I can't connect to ...
1
vote
0answers
51 views

Apache Bot Blocking when using <Location> element

I was looking through my access logs today and concluded I should probably make an effort to deal with bad traffic. I am trying to use this list (https://github.com/bluedragonz/bad-bot-blocker) as as ...
1
vote
2answers
1k views

Sonicwall App Control Advanced

I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
1
vote
2answers
257 views

How to diagnose Windows hangs - which resource is blocked?

We have a Windows 7 Pro machine running Apache/php/postgres processing Ajax requests under a constant load (several every second). Its also running various other applications, which perform lots of ...