The tag has no wiki summary.

learn more… | top users | synonyms

28
votes
16answers
28k views

Why Block Port 22 Outbound?

I'm a programmer, and I have worked for a few clients whose networks block outgoing connections on port 22. Considering that programmers often need to use port 22 for ssh, this seems like a ...
12
votes
10answers
5k views

Block Facebook for selected users

We have a few users here who are using Facebook during working hours and their productivity is through the floor, as a temporary measure I have remotely edited their hosts files to point facebook.com ...
8
votes
2answers
7k views

MySQL InnoDB database 'hangs' on selects

I'm trying to fix MySQL configuration on our server. Our app's specifics is that a lot of data is stored in single table (currently over 300 millions of rows). This table is used often for inserts ...
4
votes
1answer
528 views

How to check if a process is non-blocking in linux without using a stack tracer?

A multi-cpu server is running several processes. One process has a thread that should always be in a spinning state, using 100% of the CPU it's been assigned. My current method (besides asking the ...
4
votes
3answers
341 views

Can i safely block all ports on my sever

I have a web server running pleks and get attacked a lot every day. I configured a firewall, and there are some predefined services such as www, and ftp, etc. I am planning to block all the ports ...
4
votes
1answer
2k views

Block a website on HTTPS and allow it on HTTP (to enforce Safesearch)

I would like to block some websites on their HTTPS version and allow them on HTTP. The main websites involved are Youtube and Google Images/Videos. This is because on the HTTP version, I can enforce ...
3
votes
6answers
2k views

How can I block access to my website from certain countries using the LAMP stack?

I have a website that I do not want to be viewed by entire countries. The website is running on a LAMP server. How can I achieve this?
3
votes
1answer
305 views

Apache IPv4 deny directive blocks IPv6 addresses

Edit I have thought that excessive number of "deny" lines are confusing apache into blocking unlisted IPv4 addresses. But comment of @Ladadadada made me pinpoint the exact issue. You can read my old ...
3
votes
2answers
2k views

Are there internet users connecting with HTTP/1.0?

Are there internet users connecting with HTTP/1.0? Such as over a proxy. Because I'm going to block HTTP/1.0 since most of the bots are using HTTP/1.0.
3
votes
1answer
3k views

Linux kernel crash - any ideas?

Been getting these runaway conditions on a lightly loaded vps (debian squeeze kernel 2.6.38-bpo.2-amd64, 2GB, SSD) - top load is nothing , then jumps to 30.0 & everything grinds to a halt. I'm ...
2
votes
5answers
610 views

Block ssh tunneling navigation in my LAN

I would like to stop people bypassing Opendns and squid proxy blocks to get on facebook using ssh tunnel to their pc home. I know I can fix this talking to boss but I'd also like to understand better ...
2
votes
3answers
477 views

block websites in our network

We would like to block users from accessing sites like facebook and all from our network. All the connections are through our router(linux machine). What would be the best way to block the sites on ...
2
votes
2answers
365 views

Blocking rm -rf for application

I have application which during run-time generates interesting intermediate outputs to ./tmp directory. At the end of execution this directory is deleted. How can i preserve contents of it? I do not ...
2
votes
3answers
11k views

Squid: how to block websites for a particular IP address?

How to block websites for particular IPs by squid? Please give solution with example or configuration file.
2
votes
2answers
66 views

Can I restrict access to an apache website to a client whose IP address is on an ISP who allocates IP addresses via DHCP?

I have a website which I want to use for administrative purposes. I need to be sure that only people from certain machines can log on. the problem is they are on ISP networks. Will I truely get the ...
2
votes
2answers
4k views

Separate Nginx access log file for certain requests only

As far as I can see Nginx supports by default 2 log files: error_log (tracks issues related to the Nginx server itself) and access_log (tracks requests processed by Nginx). Whilst it is possible to ...
2
votes
3answers
5k views

How to configure a network to block gmail but allow google apps mail?

Google app mail loads via http://mail.google.com/a/[domain] and gmail loads via http://mail.google.com/mail. How can I block computers on my LAN from accessing gmail urls but at the same time permit ...
2
votes
3answers
5k views

SQL Alter database failed - being used by checkpoint process

On my SQL server 2008, i have a SQL agent job to restore a database on nightly basis. Procedure: find latest backup on other server Kill all conenction to the destination database Restore ...
2
votes
1answer
8k views

How can a block IP addresses using Windows Server 2008 firewall?

I have started to get various login attempts from different IP addresses. How can I block these IP addresses in the Windows Server 2008 Firewall?
2
votes
1answer
452 views

Block UDP traffic by rate/string-match on Windows 2008

I am administrating a Windows 2008 server (64-bit). It is being subjected to a focused set of DOS attacks where UDP packets are sent to a specific port and contain a specific string. What I need to ...
2
votes
1answer
36 views

Block traffic to certain servers

In my organization, I'd like to make sure all servers are only accessible from the inside. The only exceptions are the mail and webservers. What's the best way to do this? My own suggestion was ...
2
votes
2answers
166 views

Rejecting traffic where ACCEPT header is empty on favicon.ico requests

As part of filtering out potential harmful traffic, I currently reject traffic where $_SERVER["HTTP_ACCEPT"] is empty. I notice from my logs that a fair number of requests have been rejected due to ...
2
votes
3answers
430 views

Stop slowing down fast and verbose operations when using ssh over slow connections

I often copy many files between 2 servers connected via 1GBit ethernet while I am connected via VPN and SSH over DSL. The problem is, that the verbose output (1 line per copied file) which needs to be ...
2
votes
2answers
3k views

Log and Block Website using Windows 2008 SBS

A client has asked me to setup Windows 2008 SBS to block and log websites from a list they will provide. As far as I know they only have standard edition which means I cannot use ISA. I was thinking ...
2
votes
1answer
470 views

Administrator is being blocked by server - error 406?

Few days ago I put online new portal that comes with cms I made myself. Problem that occurred is following: Administrator logs to cms, publishes few news and then he can't access portal at all (whole ...
2
votes
1answer
106 views

Block specific client on CentOS by client name

I am looking at my Apache access log and there is suspicious activity from several ip ranges. What they have in common is that all of them are identified as "Allegro-Software-WebClient/4.07". Is ...
2
votes
2answers
368 views

I have a blocking transaction, but no statement is shown

My SQL Server 2008 started hanging on simple queries, so I checked for blocking transactions, using the built-in All Blocking Transactions report. Sure enough, such a transaction exists. However, if ...
2
votes
1answer
3k views

Disk IO causing high load on Xen/CentOS guest

Background I'm having serious issues with a xen based server, this is on the guest partition. It's a paravirtualized CentOS 5.5. I'm not sure if it's hardware or software related, or in between ...
2
votes
1answer
957 views

NFS-shared file-system is locking up

Our NFS-shared file-system is locking up. Please feel free to ask any questions you feel relevant. :) At the time, there are a lot of processes in "disk sleep" state, and the load averages on our ...
2
votes
2answers
2k views

Sonicwall App Control Advanced

I have a custom application that accesses a remote range of IP addresses, lets say for example 206.0.0.0 - 206.255.255.255, this is UDP based traffic. The issue is, Sonicwall NSA has been configured ...
1
vote
2answers
401 views

How to ban potential hacker IP Addresses from Port 80?

I am hosting a bunch of PHP web sites on a web server. While I have taken all precautionary mesaures to protect all ports, Port 80 specific attacks continue. I want to ban any IP Address that taken an ...
1
vote
4answers
634 views

blocking bad websites in ISP level

how do you approach blocking bad websites such as malicious websites, porn and etc in ISP Level.
1
vote
1answer
220 views

How to block the Java installer?

We send PC's out to customers that need a very specific version of Java installed; specifically 6.26. I already disable the Java updater but I was wondering if I could block the customer from ...
1
vote
3answers
801 views

Block IPs in apache2

Ok another noob questions here. I have serveral IP's probing my server for phpmyadmin and other administrator stuff, looks like they're looking for something to hack, but honestly I don't care who ...
1
vote
3answers
2k views

How do I block all websites (except for a whitelist of 10 or so) for specific computers on a Windows domain?

I keep seeing references to something called Squid, but I take it that's only for Linux. Rather than needlessly pay $1,000+ bucks for a content filtering subscription on our firewall, I'm seeking an ...
1
vote
3answers
2k views

How do I Stop IE8 through WSUS

Currently I have a two domain enviroment of vista with all machines calling into WSUS. The with the recent advent of IE8 being avaliable through WSUS that's been great. However I want to stop IE8 ...
1
vote
3answers
5k views

How Do I Block an IP Address on ubuntu?

I have configured Ubuntu machine as router. Steps of NAT configuration are given below: #iptables -F #iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE #iptables-save ...
1
vote
1answer
15k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
1
vote
2answers
1k views

Use .htaccess to block *All* access to specific folders

I am not sure how to do this, but I want to block all access to a specific set of folders on my web server. Say secret01 and secret 02... homeDir |- data |- www | |- .htaccess (file) | |- ...
1
vote
2answers
926 views

MySQL SELECT query hangs

On my server I have 6 MySQL databases. They all power Wordpress websites. For some reason, 2 of these databases are not accessible. To my knowledge they use INNODB, but I can't confirm it as even ...
1
vote
1answer
1k views

Block SSH access from specific countries

I found this handy script online, and would like to modify it to only block SSH access but I don't know anything about iptables and Im afraid Ill kill my system as i have no physical access to it. ...
1
vote
2answers
481 views

Automatically block IP in apache2 - it is possible?

Is there are a way to automatically block IPs with apache2. For example, if we get a lot requests (100s) for non-existing pages (or known patterns, like CHANGE_LIST.txt, etc.) to block that IP and add ...
1
vote
2answers
946 views

Blocking a specific URL by IP (a URL create by mod-rewrite)

We need to block a specific URL for anyone not on a local IP (anyone without a 192.168.. address) We however cannot use apache's <Directory /var/www/foo/bar> Order allow,deny Allow from ...
1
vote
1answer
31 views

Firewall blocking files using Reg_Ex needs to be adjusted

We have security in our firewall to prevent SQL-Injection from destroying any of our content: Name Type Context Severity Pattern Configure CS:select_into signature http-url critical ...
1
vote
2answers
745 views

Apache VirtualHost Blockhole (Eats All Requests on All Ports on an IP)

I’m exhausted. I just spent the last two hours chasing a goose that I have been after on-and-off for the past year. Here is the goal, put as succinctly as possible. Step 1: HOSTS File: 127.0.0.5 ...
1
vote
1answer
27 views

User blocked in AD by some windroid device

We have a user that is constantly blocked. We checked the logs in the domain controllers and all the information shown is that a WINDROID device is the source. How can I know which device is causing ...
1
vote
1answer
242 views

Intercepting/blocking outgoing emails from mailx + phpmailer

I was wondering if anyone knows of a way to ideally intercept (if not block) mailx from sending emails? The situation is that we have a development server (CentOS) that hosts the current version of ...
1
vote
3answers
183 views

IPTables not blocking some connections

I am using IPtables for a basic firewall, I have placed some blocks on those IP's attempting FTP, SSH conenctions, etc. I have accept rules at the top for good measure to ensure that my monitoring ...
1
vote
1answer
590 views

Nginx: protect directory and files

I wrote this to prevent the directory "download" to be accessed but from the IP 1.2.3.4. location ~ /folder/download { allow 1.2.3.4; deny all; return 403; } However, the directory ...
1
vote
1answer
685 views

Need help with IP filtering and port forwarding

I have a static IP assigned to me by my ISP. I want to access a server running tomcat in our network from outside the LAN. Can any one give a few pointers, to what I need to do, and where to start ...