Questions tagged [deny]
The deny tag has no usage guidance.
74
questions
3
votes
1
answer
4k
views
IIS 7 - Enabling deny url sequences with backslash
I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using:
<configuration>
<system.webServer>
<security>
<...
- 131
5
votes
2
answers
11k
views
Blocking a network device from communicating with another device on the LAN
I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using deny/...
- 273
2
votes
2
answers
3k
views
apache2: Require valid-user AND allow all
I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users.
So ...
- 21
5
votes
2
answers
2k
views
Denying folder in Nginx causing PHP-FPM to not take precedence
The title says it all, but I have a very interesting problem that I am quite confused on. Basically, I have a simple WordPress installation, and I wish to deny a folder (along with all files in the ...
- 696
1
vote
1
answer
348
views
Simple query about the apache Include directive
I understand the principle of including external files into the httpd.conf using the Include directive, but I just want to double-check that I've understood how it works.
On our server, we already ...
- 631
0
votes
2
answers
100
views
I need help w/iptable rules
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
The above 'ACCEPT'-line is quiet confusing to me.
Doesn'...
3
votes
1
answer
1k
views
Deny all gets overridden by another location block
location /_private {
deny all;
}
location ~ \.php$ {
# Workaround PHP vulnerability:
# http://forum.nginx.org/read.php?2,88845,page=3
try_files $uri =404;
include /etc/nginx/...
user39618
0
votes
3
answers
460
views
Inline includes for httpd.conf?
Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note ...
1
vote
1
answer
1k
views
deny all by ip .htaccess
I've been attempting to restrict access to an internet connected apache instance. My router has a port forward to the machine that is running apache. Don't know if this makes a difference.
Anyway I ...
- 361
0
votes
1
answer
1k
views
Completely random 403 errors despite explicit Allow from all
I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an:
Order Deny,Allow
Allow from all
I even ...
- 203
0
votes
1
answer
847
views
Deny all except a range of IP'S IIS 7.5 problem
I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0.
The problem is that as my personal server is on a LAN, IIS takes the ...
- 113
6
votes
4
answers
22k
views
Apache on Localhost to block incoming connections outside localhost
How can I make it that my local Apache installation works only as http://localhost/ and never from outside like using the IP of my machine when connected to a network please?
- 153
1
vote
2
answers
2k
views
Allow only certain files to be exposed to the web on Lighttpd?
Just installed it on my linux desktop, and I only want 1 or 2 files accessible to the outside world. Everything else should only be accessibly via http://localhost/ for various privacy/security ...
- 1,941
10
votes
1
answer
31k
views
4
votes
3
answers
11k
views
NGINX deny IP wildcard?
I currently deny IP addresses like this in the nginx.conf file:
deny 42.22.11.531;
But how would I deny
deny 42.22.*.*; <---- this obviously doesnt work, what is the correct syntax for nginx?
...
- 41
3
votes
5
answers
31k
views
How do I deny a user-based Group Policy for a specific computer?
So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
- 171
0
votes
1
answer
2k
views
How do I block host name instead of just IP?
I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead ...
John d.
6
votes
4
answers
84k
views
Apache2: How do I restrict access to a directory, but allow access to one file within it?
I've inherited a poorly designed web app, which has a certain file that needs to be publicly accessible, but that file is inside a directory which should not.
In other words, I need a way to block ...
- 4,656
0
votes
4
answers
2k
views
How to refuse IP's with no reverse DNS with Apache2 or iptables?
With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all?
I have a website targeted to a specific population who has valid reverse DNS. ...
- 3,365
2
votes
1
answer
2k
views
Apache LimitExcept returning Error 400 on permitted method
I have the following directive in my Apache httpd.conf:
<LimitExcept OPTIONS PROPFIND REPORT>
deny from all
</LimitExcept>
OPTIONS and PROPFIND work as expected, but REPORT returns ...
- 69.1k
55
votes
4
answers
148k
views
how to restrict access to directory and subdirs
I need to restrict access to any files or subdirs in direstory "testdir". My conf:
...
location ~* ^.+\.(jpg|txt)$ {
root /var/www/site;
}
location /testdir {
deny all;
...
tst
11
votes
4
answers
22k
views
What does the apache Satisfy directive do?
I stumbled upon a httpd.conf directive that I can't manage to understand:
<Files ~ "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</Files>
According to the doc , I would say ...
- 213
0
votes
1
answer
114
views
apache deny directive
I am using apache deny to deny a country's ip ranges(Turkey in this case).
However from the apache log I still see ips from .tr(using dls connection presumably) accessing and get a valid http 200 ...
- 1,125
1
vote
1
answer
961
views
SQL Server 2005 - Deny DROP TRIGGER permissions
We have a custom trigger on a 3rd party app table to help us audit changes. Occasionally that trigger is removed. Looking thru the traces it shows that the 3rd party app is dropping it (for no good ...
- 1,512