The deny tag has no wiki summary.
5
votes
1answer
3k views
4
votes
5answers
413 views
NTFS: Deny all permissions for all files, except where explicitly added
I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs ...
4
votes
2answers
6k views
how to restrict access to directory and subdirs
I need to restrict access to any files or subdirs in direstory "testdir". My conf:
...
location ~* ^.+\.(jpg|txt)$ {
root /var/www/site;
}
location /testdir {
deny all;
...
3
votes
2answers
321 views
Blocking a network device from communicating with another device on the LAN
I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using ...
3
votes
1answer
389 views
Denying folder in Nginx causing PHP-FPM to not take precedence
The title says it all, but I have a very interesting problem that I am quite confused on. Basically, I have a simple WordPress installation, and I wish to deny a folder (along with all files in the ...
2
votes
1answer
1k views
Apache LimitExcept returning Error 400 on permitted method
I have the following directive in my Apache httpd.conf:
<LimitExcept OPTIONS PROPFIND REPORT>
deny from all
</LimitExcept>
OPTIONS and PROPFIND work as expected, but REPORT returns ...
2
votes
1answer
211 views
Deny all gets overridden by another location block
location /_private {
deny all;
}
location ~ \.php$ {
# Workaround PHP vulnerability:
# http://forum.nginx.org/read.php?2,88845,page=3
try_files $uri =404;
include ...
2
votes
4answers
10k views
How do I deny a user-based Group Policy for a specific computer?
So we have a GPO setup to redirect "My Documents" to a server location for all users in the domain (it's linked to the root "Users" OU). This works just fine, but we have 2 special workstations that ...
2
votes
1answer
891 views
What does the apache Satisfy directive do?
I stumbled upon a httpd.conf directive that I can't manage to understand:
<Files ~ "^\.ht">
Order allow,deny
Deny from all
Satisfy All
</Files>
According to the doc , I would say ...
2
votes
1answer
84 views
Exchange 2003 - Internal only group allow external delivery
I have a situation, where there are users in a group, who are only allowed to email internally.
I have created an external domain, which i need to allow that internal group to be able to send to, but ...
2
votes
2answers
6k views
Apache2: How do I restrict access to a directory, but allow access to one file within it?
I've inherited a poorly designed web app, which has a certain file that needs to be publicly accessible, but that file is inside a directory which should not.
In other words, I need a way to block ...
1
vote
2answers
2k views
NGINX deny IP wildcard?
I currently deny IP addresses like this in the nginx.conf file:
deny 42.22.11.531;
But how would I deny
deny 42.22.*.*; <---- this obviously doesnt work, what is the correct syntax for nginx?
...
1
vote
4answers
3k views
Apache on Localhost to block incoming connections outside localhost
How can I make it that my local Apache installation works only as http://localhost/ and never from outside like using the IP of my machine when connected to a network please?
1
vote
2answers
258 views
Deny IP address on AWS ELB
I've, more or less, following configuration on AWS:
Elastic load balancer with 3 machines o 3 different availability zones. My security group allows 0.0.0.0/0:80 as it's my rails application (nginx, ...
1
vote
1answer
86 views
Simple query about the apache Include directive
I understand the principle of including external files into the httpd.conf using the Include directive, but I just want to double-check that I've understood how it works.
On our server, we already ...
1
vote
1answer
398 views
IIS 7 - Enabling deny url sequences with backslash
I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using:
<configuration>
<system.webServer>
<security>
...
1
vote
2answers
185 views
apache2: Require valid-user AND allow all
I want to allow basic authentication, but not require it. All visitors -authenticated or not- should be able to acces a page (script) where the script can add special features for valid users.
So ...
1
vote
1answer
331 views
SQL Server 2005 - Deny DROP TRIGGER permissions
We have a custom trigger on a 3rd party app table to help us audit changes. Occasionally that trigger is removed. Looking thru the traces it shows that the 3rd party app is dropping it (for no good ...
1
vote
1answer
191 views
deny all by ip .htaccess
I've been attempting to restrict access to an internet connected apache instance. My router has a port forward to the machine that is running apache. Don't know if this makes a difference.
Anyway I ...
0
votes
1answer
177 views
Completely random 403 errors despite explicit Allow from all
I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an:
Order Deny,Allow
Allow from all
I even ...
0
votes
4answers
801 views
How to refuse IP's with no reverse DNS with Apache2 or iptables?
With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all?
I have a website targeted to a specific population who has valid reverse DNS. ...
0
votes
3answers
206 views
nginx not blocking user agents
I have this in my .conf file for my website in attempt to block 2 user agents from constantly probing my server.
## Block http user agent - morpheus fucking scanner ##
if ($http_user_agent ~* ...
0
votes
2answers
197 views
nginx deny user agent causes error when not encapsulated in quotes
I'm trying to deny some user agents I constantly see probing my nginx web server.
If I have this in my .conf file
## Block http user agent - morpheus fucking scanner ##
if ($http_user_agent ~* ...
0
votes
1answer
116 views
Apache LimitExcept GET to IP address but deny all methods to other IPs
I'm having some trouble with getting the Order directive right in a vhost configuration in Apache.
I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
0
votes
1answer
883 views
How do I block host name instead of just IP?
I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead ...
0
votes
1answer
75 views
apache deny directive
I am using apache deny to deny a country's ip ranges(Turkey in this case).
However from the apache log I still see ips from .tr(using dls connection presumably) accessing and get a valid http 200 ...
0
votes
1answer
200 views
Reject Nginx request with no authentication in general
Is it possible to reject all nginx request, which don't send basic authentication data with them?
I have requests like this:
xxx.xxx.xxx.xxx - - [24/Oct/2012:10:32:12 +0200] "POST /path HTTP/1.1" ...
0
votes
2answers
60 views
I need help w/iptable rules
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere
The above 'ACCEPT'-line is quiet confusing to me.
...
0
votes
3answers
215 views
Inline includes for httpd.conf?
Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note ...
0
votes
2answers
297 views
Allow only certain files to be exposed to the web on Lighttpd?
Just installed it on my linux desktop, and I only want 1 or 2 files accessible to the outside world. Everything else should only be accessibly via http://localhost/ for various privacy/security ...
0
votes
0answers
57 views
Windows Network copy and access denied randomly
I have a windows 2008 R2 server and I now installed a new bigger HDD into it.
I wanted to copy big AVI files to the new server hdd what is shared on the local network. I have write access to the ...
0
votes
1answer
198 views
Deny all except a range of IP'S IIS 7.5 problem
I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0.
The problem is that as my personal server is on a LAN, IIS takes the ...
