The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
45 views

nginx deny ip - access forbidden by rule in error log

We having blocked some bad bots which relentlessly try to access our site via "Deny" directives in NGINX. It's not possible for us to block it at the firewall, as we use a load balancer that we have ...
1
vote
0answers
92 views

Can I deny in nginx based by URI and IP?

Basically I have an wordpress site (with a ecommerce store and a social login). I have denied all access to wp-login.php based on ip address. The problem is that social login uses this wp-login file. ...
0
votes
1answer
66 views

SELinux preventing Asterisk from connecting to IMAP server for voicemail

I am running Asterisk on Fedora 23 and am using the voicemail IMAP module to store voicemails to Gmail. When SELinux is in enforcing mode it prevents Asterisk from connecting to Gmail. Here is the ...
2
votes
3answers
130 views

Debian - how to prevent global read access for all files?

In my debian all files, even the system ones have permissions rw-r--r--, so it means that all users can view ANY file even some system configuration or database files and so on. How do I prevent ...
0
votes
1answer
54 views

NGinx Block all Wordpress Files except wp-login and wp-admin

How can I deny all; access to all front-facing wordpress files, except wp-login.php and wp-admin? What I currently have blocks access to all wp-* including the wp-admin location ~ ^/(index\.php|wp-.*...
1
vote
1answer
27 views

order allow,deny blocks whole site

I can't get file blocking working. If I use the following statement in .htaccess, it blocks my whole site: order allow,deny <Files ~ ".*\.(js|JS|css|CSS|jpg|JPG|gif|GIF|png|PNG|mp4|MP4)$"> ...
0
votes
1answer
80 views

nginx: [warn] low address bits

So yeah, i got a list of blocked ip-ranges, and some of them gives me an error in gninx when i try to restart nginx. nginx: [warn] low address bits of 79.8.0.0/12 are meaningless in /etc/nginx/...
1
vote
2answers
70 views

MySQL is denying access to a legitimate remote user

I have created a user and given that user full access, but MySQL is still denying access to that user - why? Create user: create user 'myUser'@'Mikes-MacBook-Air.local' identified by '...
0
votes
1answer
143 views

Mail send by server gets denied by mx.hotmail.com [duplicate]

I got an notice that some clients werent receiving their emails, all clients used hotmail accounts, while i looked into logs i got this part Sep 25 07:52:51 s22090 named[25045]: client 127.0.0.1#...
-1
votes
1answer
892 views

Nginx allow/deny not working (403 Forbidden)

I am attempting to set some allow/deny directives within nginx for a few subfolders on my server. I am modifying the /etc/nginx/sites/enabled/default file, which is listed below: server { listen ...
2
votes
1answer
112 views

htaccess deny form all wp-login.php blocks “most” adresses but not all

One of my sites has been hacked recently. To make it short, i had an old version of wisiya newsletters running wich was used to upload a few files in the wp-content directory. Since then a lot of ...
0
votes
1answer
221 views

APF Limit to Deny IPs?

So, I've been actively banning IPs of malicious users. Previously, I only used IPtables to do this, but since giving APF a whirl, I've been having issues. It appears that there is a limit to the ...
0
votes
1answer
1k views

How to deny requests in nginx when there is no referer?

In nginx access.log I see many lines like: 1.2.3.4 - - [19/Oct/2014:22:48:11 -0400] "POST /someurl/suburl HTTP/1.1" 200 19967 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/...
1
vote
1answer
128 views

How can I deny access to a folder in OpenLiteSpeed similarly to the way Apache does it?

I'm trying to deny access to a folder for a website that is hosted with OpenLiteSpeed v1.4.2, but I'm have trouble. I take it that .htaccess isn't supported in OpenLiteSpeed so I am unable to just put ...
0
votes
1answer
689 views

Nginx deny IP's and setting custom 403 downloads a file?

I've attached my Nginx conf file for my default site which runs on Ubuntu. What I'm trying to achieve is the following: Main directory is /usr/share/nginx/www with the default file index.php ...
0
votes
1answer
56 views

Global denial of certain file(s) on Apache

I run a webserver under Apache with several virtual hosts. I would like to prohobit the access to certain file names, but instead of using a deny rule on each vh I would like to know if I can achieve ...
0
votes
1answer
1k views

httpd (WordPress) gets avc denied write (SELinux)

I'm getting following message in my /var/log/audit/audit.log: type=AVC msg=audit(1402615093.053:68): avc: denied { write } for pid=799 comm="httpd" name="php" dev="xvda1" ino=8667365 scontext=...
-4
votes
1answer
303 views

Can I deny a user the ability to disable the microphone in Windows 7?

I'm looking for an option to deny a user the ability disable microphone on a laptop running Windows 7. I've tried to set DENY permission on the microphone setting in the registry, but it doesn't work....
0
votes
1answer
296 views

Can Apache dynamically deny? [duplicate]

I host three different websites on the same server. Here's excerpts from this morning's Apache logs: ### SITE 1 ### [Fri Dec 13 09:15:49 2013] [error] [client 85.17.87.36] script not found or unable ...
1
vote
0answers
69 views

squid as parent of url filtering

I have this situation: client -> url-filtering -> squid -> internet The squid proxy sees all clients as a single IP ( of url filtering) so I have a lot of connections from a single IP. Squid is the ...
1
vote
1answer
2k views

nginx deny directory and files to be downloaded

gurus. I have a problem and i dont know how to solve it. I am working with Git and Compass/SASS on some projects. Now i want to protect those directories. When i go only to the folder its all fine – i ...
-1
votes
2answers
487 views

Nginx deny doesn't work for folder files

I'm trying to restrict access to my site to allow only specific IPs and I've got the following problem: when I access www.example.com deny works perfectly, but when I try to access www.example.com/...
1
vote
2answers
3k views

Apache httpd: How can I Deny from all, Allow from specifc IP addresses

Can someone take a look at the syntax of the code below and let me know if it is correct -- my intention is to exclude the htaccess for the IP ranges specified in the 'Allow' part and rest of all ...
0
votes
1answer
880 views

hosts.deny line too long or too big file?

I have about 50k ip addresses denied in the hosts.deny file, generated by a script with 7 addresses per line max and get this error: warning: /etc/hosts.deny, line 4429: missing newline or line too ...
1
vote
1answer
413 views

What is the easiest way of adding a list of AWS IP addresses to IIS 7.5 disallow list?

So far, I have been manually adding C-class IP address ranges to the IIS disallow list, ie; 101.22.32.0 / 255.255.255.0. I would essentially like to add all the AWS IP address ranges found here: EC2 ...
0
votes
3answers
5k views

nginx not blocking user agents

I have this in my .conf file for my website in attempt to block 2 user agents from constantly probing my server. ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* "...
2
votes
2answers
4k views

nginx deny user agent causes error when not encapsulated in quotes

I'm trying to deny some user agents I constantly see probing my nginx web server. If I have this in my .conf file ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
0
votes
1answer
2k views

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
1
vote
3answers
4k views

Deny IP address on AWS ELB

I've, more or less, following configuration on AWS: Elastic load balancer with 3 machines o 3 different availability zones. My security group allows 0.0.0.0/0:80 as it's my rails application (nginx, ...
0
votes
1answer
869 views

Reject Nginx request with no authentication in general

Is it possible to reject all nginx request, which don't send basic authentication data with them? I have requests like this: xxx.xxx.xxx.xxx - - [24/Oct/2012:10:32:12 +0200] "POST /path HTTP/1.1" ...
4
votes
5answers
1k views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs (I'...
1
vote
1answer
2k views

IIS 7 - Enabling deny url sequences with backslash

I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using: <configuration> <system.webServer> <security> <...
3
votes
2answers
2k views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using deny/...
1
vote
2answers
508 views

apache2: Require valid-user AND allow all

I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users. So ...
4
votes
2answers
1k views

Denying folder in Nginx causing PHP-FPM to not take precedence

The title says it all, but I have a very interesting problem that I am quite confused on. Basically, I have a simple WordPress installation, and I wish to deny a folder (along with all files in the ...
1
vote
1answer
186 views

Simple query about the apache Include directive

I understand the principle of including external files into the httpd.conf using the Include directive, but I just want to double-check that I've understood how it works. On our server, we already ...
0
votes
2answers
63 views

I need help w/iptable rules

Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere The above 'ACCEPT'-line is quiet confusing to me. ...
2
votes
1answer
609 views

Deny all gets overridden by another location block

location /_private { deny all; } location ~ \.php$ { # Workaround PHP vulnerability: # http://forum.nginx.org/read.php?2,88845,page=3 try_files $uri =404; include /etc/nginx/...
0
votes
3answers
349 views

Inline includes for httpd.conf?

Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note ...
1
vote
1answer
618 views

deny all by ip .htaccess

I've been attempting to restrict access to an internet connected apache instance. My router has a port forward to the machine that is running apache. Don't know if this makes a difference. Anyway I ...
0
votes
1answer
612 views

Completely random 403 errors despite explicit Allow from all

I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an: Order Deny,Allow Allow from all I even ...
0
votes
1answer
249 views

Deny all except a range of IP'S IIS 7.5 problem

I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0. The problem is that as my personal server is on a LAN, IIS takes the ...
2
votes
4answers
8k views

Apache on Localhost to block incoming connections outside localhost

How can I make it that my local Apache installation works only as http://localhost/ and never from outside like using the IP of my machine when connected to a network please?
0
votes
2answers
1k views

Allow only certain files to be exposed to the web on Lighttpd?

Just installed it on my linux desktop, and I only want 1 or 2 files accessible to the outside world. Everything else should only be accessibly via http://localhost/ for various privacy/security ...
8
votes
1answer
13k views

How to block IP addresses in HAProxy?

Is there something like Apache "deny from ip" in haproxy?
1
vote
2answers
5k views

NGINX deny IP wildcard?

I currently deny IP addresses like this in the nginx.conf file: deny 42.22.11.531; But how would I deny deny 42.22.*.*; <---- this obviously doesnt work, what is the correct syntax for nginx? ...
3
votes
5answers
22k views

How do I deny a user-based Group Policy for a specific computer?

So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
0
votes
1answer
1k views

How do I block host name instead of just IP?

I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead ...
2
votes
3answers
24k views

Apache2: How do I restrict access to a directory, but allow access to one file within it?

I've inherited a poorly designed web app, which has a certain file that needs to be publicly accessible, but that file is inside a directory which should not. In other words, I need a way to block ...
0
votes
4answers
1k views

How to refuse IP's with no reverse DNS with Apache2 or iptables?

With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all? I have a website targeted to a specific population who has valid reverse DNS. ...