The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
23 views

Nginx not denying hidden files?

I have the following server block but it doesn't seem to deny hidden files in the root (i.e. files beginning with .) properly. server { listen 80; ## listen for ipv4; this line is default and ...
-4
votes
1answer
83 views

Can I deny a user the ability to disable the microphone in Windows 7?

I'm looking for an option to deny a user the ability disable microphone on a laptop running Windows 7. I've tried to set DENY permission on the microphone setting in the registry, but it doesn't ...
0
votes
1answer
57 views

Can Apache dynamically deny? [duplicate]

I host three different websites on the same server. Here's excerpts from this morning's Apache logs: ### SITE 1 ### [Fri Dec 13 09:15:49 2013] [error] [client 85.17.87.36] script not found or unable ...
1
vote
0answers
15 views

squid as parent of url filtering

I have this situation: client -> url-filtering -> squid -> internet The squid proxy sees all clients as a single IP ( of url filtering) so I have a lot of connections from a single IP. Squid is the ...
0
votes
1answer
57 views

nginx deny directory and files to be downloaded

gurus. I have a problem and i dont know how to solve it. I am working with Git and Compass/SASS on some projects. Now i want to protect those directories. When i go only to the folder its all fine – i ...
-1
votes
2answers
81 views

Nginx deny doesn't work for folder files

I'm trying to restrict access to my site to allow only specific IPs and I've got the following problem: when I access www.example.com deny works perfectly, but when I try to access ...
1
vote
2answers
314 views

Apache httpd: How can I Deny from all, Allow from specifc IP addresses

Can someone take a look at the syntax of the code below and let me know if it is correct -- my intention is to exclude the htaccess for the IP ranges specified in the 'Allow' part and rest of all ...
0
votes
0answers
93 views

Apache .htaccess security and wp-login.php

Lately we had a lot of requests to our wp-login.php on one of our wordpress installations. So after reading up a little, I decided to allow access only to the two static IPs we use in the office, ...
0
votes
1answer
217 views

hosts.deny line too long or too big file?

I have about 50k ip addresses denied in the hosts.deny file, generated by a script with 7 addresses per line max and get this error: warning: /etc/hosts.deny, line 4429: missing newline or line too ...
0
votes
0answers
11 views

apache2 access rules on directories issue

I am starting with apache2 on linux and am a bit confused concerning setting access rules to Directories, in my httpd.config In the first part I set a deny to the complete filesystem. In the second ...
1
vote
1answer
99 views

What is the easiest way of adding a list of AWS IP addresses to IIS 7.5 disallow list?

So far, I have been manually adding C-class IP address ranges to the IIS disallow list, ie; 101.22.32.0 / 255.255.255.0. I would essentially like to add all the AWS IP address ranges found here: EC2 ...
0
votes
3answers
823 views

nginx not blocking user agents

I have this in my .conf file for my website in attempt to block 2 user agents from constantly probing my server. ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
0
votes
2answers
1k views

nginx deny user agent causes error when not encapsulated in quotes

I'm trying to deny some user agents I constantly see probing my nginx web server. If I have this in my .conf file ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
0
votes
1answer
298 views

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
1
vote
2answers
615 views

Deny IP address on AWS ELB

I've, more or less, following configuration on AWS: Elastic load balancer with 3 machines o 3 different availability zones. My security group allows 0.0.0.0/0:80 as it's my rails application (nginx, ...
0
votes
0answers
89 views

Windows Network copy and access denied randomly

I have a windows 2008 R2 server and I now installed a new bigger HDD into it. I wanted to copy big AVI files to the new server hdd what is shared on the local network. I have write access to the ...
0
votes
1answer
297 views

Reject Nginx request with no authentication in general

Is it possible to reject all nginx request, which don't send basic authentication data with them? I have requests like this: xxx.xxx.xxx.xxx - - [24/Oct/2012:10:32:12 +0200] "POST /path HTTP/1.1" ...
4
votes
5answers
532 views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
1
vote
1answer
661 views

IIS 7 - Enabling deny url sequences with backslash

I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using: <configuration> <system.webServer> <security> ...
3
votes
2answers
417 views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
1
vote
2answers
273 views

apache2: Require valid-user AND allow all

I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users. So ...
3
votes
1answer
510 views

Denying folder in Nginx causing PHP-FPM to not take precedence

The title says it all, but I have a very interesting problem that I am quite confused on. Basically, I have a simple WordPress installation, and I wish to deny a folder (along with all files in the ...
1
vote
1answer
107 views

Simple query about the apache Include directive

I understand the principle of including external files into the httpd.conf using the Include directive, but I just want to double-check that I've understood how it works. On our server, we already ...
0
votes
2answers
61 views

I need help w/iptable rules

Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere The above 'ACCEPT'-line is quiet confusing to me. ...
2
votes
1answer
289 views

Deny all gets overridden by another location block

location /_private { deny all; } location ~ \.php$ { # Workaround PHP vulnerability: # http://forum.nginx.org/read.php?2,88845,page=3 try_files $uri =404; include ...
2
votes
1answer
91 views

Exchange 2003 - Internal only group allow external delivery

I have a situation, where there are users in a group, who are only allowed to email internally. I have created an external domain, which i need to allow that internal group to be able to send to, but ...
0
votes
3answers
278 views

Inline includes for httpd.conf?

Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note ...
1
vote
1answer
295 views

deny all by ip .htaccess

I've been attempting to restrict access to an internet connected apache instance. My router has a port forward to the machine that is running apache. Don't know if this makes a difference. Anyway I ...
0
votes
1answer
267 views

Completely random 403 errors despite explicit Allow from all

I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an: Order Deny,Allow Allow from all I even ...
0
votes
1answer
214 views

Deny all except a range of IP'S IIS 7.5 problem

I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0. The problem is that as my personal server is on a LAN, IIS takes the ...
1
vote
4answers
4k views

Apache on Localhost to block incoming connections outside localhost

How can I make it that my local Apache installation works only as http://localhost/ and never from outside like using the IP of my machine when connected to a network please?
0
votes
2answers
461 views

Allow only certain files to be exposed to the web on Lighttpd?

Just installed it on my linux desktop, and I only want 1 or 2 files accessible to the outside world. Everything else should only be accessibly via http://localhost/ for various privacy/security ...
7
votes
1answer
5k views

How to block IP addresses in HAProxy?

Is there something like Apache "deny from ip" in haproxy?
1
vote
2answers
3k views

NGINX deny IP wildcard?

I currently deny IP addresses like this in the nginx.conf file: deny 42.22.11.531; But how would I deny deny 42.22.*.*; <---- this obviously doesnt work, what is the correct syntax for nginx? ...
2
votes
4answers
13k views

How do I deny a user-based Group Policy for a specific computer?

So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
0
votes
1answer
1k views

How do I block host name instead of just IP?

I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead ...
2
votes
2answers
11k views

Apache2: How do I restrict access to a directory, but allow access to one file within it?

I've inherited a poorly designed web app, which has a certain file that needs to be publicly accessible, but that file is inside a directory which should not. In other words, I need a way to block ...
0
votes
4answers
915 views

How to refuse IP's with no reverse DNS with Apache2 or iptables?

With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all? I have a website targeted to a specific population who has valid reverse DNS. ...
2
votes
1answer
2k views

Apache LimitExcept returning Error 400 on permitted method

I have the following directive in my Apache httpd.conf: <LimitExcept OPTIONS PROPFIND REPORT> deny from all </LimitExcept> OPTIONS and PROPFIND work as expected, but REPORT returns ...
8
votes
3answers
10k views

how to restrict access to directory and subdirs

I need to restrict access to any files or subdirs in direstory "testdir". My conf: ... location ~* ^.+\.(jpg|txt)$ { root /var/www/site; } location /testdir { deny all; ...
3
votes
1answer
2k views

What does the apache Satisfy directive do?

I stumbled upon a httpd.conf directive that I can't manage to understand: <Files ~ "^\.ht"> Order allow,deny Deny from all Satisfy All </Files> According to the doc , I would say ...
0
votes
1answer
81 views

apache deny directive

I am using apache deny to deny a country's ip ranges(Turkey in this case). However from the apache log I still see ips from .tr(using dls connection presumably) accessing and get a valid http 200 ...
1
vote
1answer
388 views

SQL Server 2005 - Deny DROP TRIGGER permissions

We have a custom trigger on a 3rd party app table to help us audit changes. Occasionally that trigger is removed. Looking thru the traces it shows that the 3rd party app is dropping it (for no good ...