Tagged Questions

The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
22 views

How to deny requests in nginx when there is no referer?

In nginx access.log I see many lines like: 1.2.3.4 - - [19/Oct/2014:22:48:11 -0400] "POST /someurl/suburl HTTP/1.1" 200 19967 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) ...
1
vote
1answer
17 views

How can I deny access to a folder in OpenLiteSpeed similarly to the way Apache does it?

I'm trying to deny access to a folder for a website that is hosted with OpenLiteSpeed v1.4.2, but I'm have trouble. I take it that .htaccess isn't supported in OpenLiteSpeed so I am unable to just put ...
1
vote
1answer
25 views

How to deny POST to a url in nginx

Some of the sql heavy urls on my app (say /members) are being attacked by botnets. So I'd like to disable anybody to post to these urls, while allowing others to GET them. I tried to make a nested ...
0
votes
1answer
42 views

Nginx deny IP's and setting custom 403 downloads a file?

I've attached my Nginx conf file for my default site which runs on Ubuntu. What I'm trying to achieve is the following: Main directory is /usr/share/nginx/www with the default file index.php ...
0
votes
1answer
24 views

Global denial of certain file(s) on Apache

I run a webserver under Apache with several virtual hosts. I would like to prohobit the access to certain file names, but instead of using a deny rule on each vh I would like to know if I can achieve ...
0
votes
1answer
198 views

httpd (WordPress) gets avc denied write (SELinux)

I'm getting following message in my /var/log/audit/audit.log: type=AVC msg=audit(1402615093.053:68): avc: denied { write } for pid=799 comm="httpd" name="php" dev="xvda1" ino=8667365 ...
0
votes
0answers
97 views

Nginx not denying hidden files?

I have the following server block but it doesn't seem to deny hidden files in the root (i.e. files beginning with .) properly. server { listen 80; ## listen for ipv4; this line is default and ...
-4
votes
1answer
110 views

Can I deny a user the ability to disable the microphone in Windows 7?

I'm looking for an option to deny a user the ability disable microphone on a laptop running Windows 7. I've tried to set DENY permission on the microphone setting in the registry, but it doesn't ...
0
votes
1answer
92 views

Can Apache dynamically deny? [duplicate]

I host three different websites on the same server. Here's excerpts from this morning's Apache logs: ### SITE 1 ### [Fri Dec 13 09:15:49 2013] [error] [client 85.17.87.36] script not found or unable ...
1
vote
0answers
37 views

squid as parent of url filtering

I have this situation: client -> url-filtering -> squid -> internet The squid proxy sees all clients as a single IP ( of url filtering) so I have a lot of connections from a single IP. Squid is the ...
1
vote
1answer
356 views

nginx deny directory and files to be downloaded

gurus. I have a problem and i dont know how to solve it. I am working with Git and Compass/SASS on some projects. Now i want to protect those directories. When i go only to the folder its all fine – i ...
-1
votes
2answers
133 views

Nginx deny doesn't work for folder files

I'm trying to restrict access to my site to allow only specific IPs and I've got the following problem: when I access www.example.com deny works perfectly, but when I try to access ...
1
vote
2answers
1k views

Apache httpd: How can I Deny from all, Allow from specifc IP addresses

Can someone take a look at the syntax of the code below and let me know if it is correct -- my intention is to exclude the htaccess for the IP ranges specified in the 'Allow' part and rest of all ...
0
votes
0answers
152 views

Apache .htaccess security and wp-login.php

Lately we had a lot of requests to our wp-login.php on one of our wordpress installations. So after reading up a little, I decided to allow access only to the two static IPs we use in the office, ...
0
votes
1answer
391 views

hosts.deny line too long or too big file?

I have about 50k ip addresses denied in the hosts.deny file, generated by a script with 7 addresses per line max and get this error: warning: /etc/hosts.deny, line 4429: missing newline or line too ...
1
vote
1answer
173 views

What is the easiest way of adding a list of AWS IP addresses to IIS 7.5 disallow list?

So far, I have been manually adding C-class IP address ranges to the IIS disallow list, ie; 101.22.32.0 / 255.255.255.0. I would essentially like to add all the AWS IP address ranges found here: EC2 ...
0
votes
3answers
2k views

nginx not blocking user agents

I have this in my .conf file for my website in attempt to block 2 user agents from constantly probing my server. ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
1
vote
2answers
2k views

nginx deny user agent causes error when not encapsulated in quotes

I'm trying to deny some user agents I constantly see probing my nginx web server. If I have this in my .conf file ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
0
votes
1answer
884 views

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
1
vote
3answers
1k views

Deny IP address on AWS ELB

I've, more or less, following configuration on AWS: Elastic load balancer with 3 machines o 3 different availability zones. My security group allows 0.0.0.0/0:80 as it's my rails application (nginx, ...
0
votes
0answers
128 views

Windows Network copy and access denied randomly

I have a windows 2008 R2 server and I now installed a new bigger HDD into it. I wanted to copy big AVI files to the new server hdd what is shared on the local network. I have write access to the ...
0
votes
1answer
442 views

Reject Nginx request with no authentication in general

Is it possible to reject all nginx request, which don't send basic authentication data with them? I have requests like this: xxx.xxx.xxx.xxx - - [24/Oct/2012:10:32:12 +0200] "POST /path HTTP/1.1" ...
4
votes
5answers
752 views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
1
vote
1answer
864 views

IIS 7 - Enabling deny url sequences with backslash

I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using: <configuration> <system.webServer> <security> ...
3
votes
2answers
597 views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
1
vote
2answers
351 views

apache2: Require valid-user AND allow all

I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users. So ...
3
votes
1answer
624 views

Denying folder in Nginx causing PHP-FPM to not take precedence

The title says it all, but I have a very interesting problem that I am quite confused on. Basically, I have a simple WordPress installation, and I wish to deny a folder (along with all files in the ...
1
vote
1answer
129 views

Simple query about the apache Include directive

I understand the principle of including external files into the httpd.conf using the Include directive, but I just want to double-check that I've understood how it works. On our server, we already ...
0
votes
2answers
61 views

I need help w/iptable rules

Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere The above 'ACCEPT'-line is quiet confusing to me. ...
2
votes
1answer
368 views

Deny all gets overridden by another location block

location /_private { deny all; } location ~ \.php$ { # Workaround PHP vulnerability: # http://forum.nginx.org/read.php?2,88845,page=3 try_files $uri =404; include ...
2
votes
1answer
102 views

Exchange 2003 - Internal only group allow external delivery

I have a situation, where there are users in a group, who are only allowed to email internally. I have created an external domain, which i need to allow that internal group to be able to send to, but ...
0
votes
3answers
304 views

Inline includes for httpd.conf?

Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note ...
1
vote
1answer
399 views

deny all by ip .htaccess

I've been attempting to restrict access to an internet connected apache instance. My router has a port forward to the machine that is running apache. Don't know if this makes a difference. Anyway I ...
0
votes
1answer
358 views

Completely random 403 errors despite explicit Allow from all

I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an: Order Deny,Allow Allow from all I even ...
0
votes
1answer
225 views

Deny all except a range of IP'S IIS 7.5 problem

I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0. The problem is that as my personal server is on a LAN, IIS takes the ...
1
vote
4answers
4k views

Apache on Localhost to block incoming connections outside localhost

How can I make it that my local Apache installation works only as http://localhost/ and never from outside like using the IP of my machine when connected to a network please?
0
votes
2answers
647 views

Allow only certain files to be exposed to the web on Lighttpd?

Just installed it on my linux desktop, and I only want 1 or 2 files accessible to the outside world. Everything else should only be accessibly via http://localhost/ for various privacy/security ...
8
votes
1answer
6k views

How to block IP addresses in HAProxy?

Is there something like Apache "deny from ip" in haproxy?
1
vote
2answers
3k views

NGINX deny IP wildcard?

I currently deny IP addresses like this in the nginx.conf file: deny 42.22.11.531; But how would I deny deny 42.22.*.*; <---- this obviously doesnt work, what is the correct syntax for nginx? ...
2
votes
4answers
15k views

How do I deny a user-based Group Policy for a specific computer?

So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
0
votes
1answer
1k views

How do I block host name instead of just IP?

I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead ...
2
votes
3answers
14k views

Apache2: How do I restrict access to a directory, but allow access to one file within it?

I've inherited a poorly designed web app, which has a certain file that needs to be publicly accessible, but that file is inside a directory which should not. In other words, I need a way to block ...
0
votes
4answers
985 views

How to refuse IP's with no reverse DNS with Apache2 or iptables?

With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all? I have a website targeted to a specific population who has valid reverse DNS. ...
2
votes
1answer
2k views

Apache LimitExcept returning Error 400 on permitted method

I have the following directive in my Apache httpd.conf: <LimitExcept OPTIONS PROPFIND REPORT> deny from all </LimitExcept> OPTIONS and PROPFIND work as expected, but REPORT returns ...
11
votes
4answers
14k views

how to restrict access to directory and subdirs

I need to restrict access to any files or subdirs in direstory "testdir". My conf: ... location ~* ^.+\.(jpg|txt)$ { root /var/www/site; } location /testdir { deny all; ...
3
votes
1answer
2k views

What does the apache Satisfy directive do?

I stumbled upon a httpd.conf directive that I can't manage to understand: <Files ~ "^\.ht"> Order allow,deny Deny from all Satisfy All </Files> According to the doc , I would say ...
0
votes
1answer
83 views

apache deny directive

I am using apache deny to deny a country's ip ranges(Turkey in this case). However from the apache log I still see ips from .tr(using dls connection presumably) accessing and get a valid http 200 ...
1
vote
1answer
443 views

SQL Server 2005 - Deny DROP TRIGGER permissions

We have a custom trigger on a 3rd party app table to help us audit changes. Occasionally that trigger is removed. Looking thru the traces it shows that the 3rd party app is dropping it (for no good ...