The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
12 views

Fail2Ban Filter Errors

I'm trying to add two fail2ban filters, one for post flood and phpmyadmin brute force but i get the following errors. logs: fail2ban.filter : ERROR No 'host' group in '[[]client []] File does not ...
0
votes
2answers
33 views

Redirect a port to a blocked port but with the filter to unlock it

I have all ports with iptables dropped for security reasons, now i want to open a port which redirects the traffic to a blocked port, but it will open if the traffic comes to this port. Let's see, i ...
0
votes
2answers
50 views

How can the SSDP protocol be filtered out of Wireshark view?

In Wireshark version 1.12.4, I am trying to filter out packet messages with an SSDP protocol. When I clicked the Expression button next to the Filter field, and selected "HTTP" (as Field Name) and ...
0
votes
0answers
8 views

filtering in traffic shaping

I am using a traffic shaping by HTB and IPhashing filter in an organization with 10500 users. In my project i want to control bandwidth per IP so I created for each IP an individual class. HTB ...
2
votes
1answer
23 views

How are filters combined in syslog-ng

If I've got an entry in syslog-ng log { source (src); filter (filter1); filter (filter2); filter (filter3); filter (filter4); destination (all_log) } And, say filter4 is a very ...
6
votes
1answer
56 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
1
vote
0answers
29 views

Applying filter on mail from specific subnet in postfix [duplicate]

I'm trying to get the following to work: We have a postfix relay on the edge of our network, accepting all mail from our internal LAN & DMZ. What we are trying to get to work is limiting the ...
0
votes
1answer
21 views

Make ProFtpd ignore a blank command

Is there a way to make ProFtpd ignore a blank command? Now it says "500 Invalid command: try being more creative" This confuses a client ftp program. The client (which I can't change) issues blank ...
1
vote
1answer
323 views

Clearing out Barracuda 310 web filter DNS/site cache?

On my network I have a Barracuda 310 web filter installed. After an issue with our ISP suddenly interrupting our DNS service, we switched over to a more reliable DNS on all of our systems. ...
0
votes
1answer
100 views

Tcpdump advanced filters

i want ask for command can Get only the IPs have more then 1 connection with different source port xxx.xxx.xxx.xxx:X | xxx.xxx.xxx.xxx:Y (example) if IP1 has connection to server with Src Port X ...
0
votes
0answers
98 views

What does Nginx Proxy Filter in Fail2ban really do?

What does Nginx Proxy Filter in Fail2ban really do? I am currently setting up Fail2Ban for Nginx. Almost everywhere I've read, they all have included a setting for [nginx-proxy] proxy filter. From ...
0
votes
1answer
354 views

Postfix: Pipe to script bounces sent to specific virtual user

I'm building a small ticket system where basically some mail accounts of my email server are piped into a PHP script that will take care of the emails. The server is running, I can send email over ...
0
votes
1answer
2k views

sed fix for BusyBox - boot fail unable to mount LVM

BusyBox why u no vi?! Summary: Ubuntu 14.04 Server after upgrade first boot, only boots to BusyBox v1.21.1 initramfs with "gave up waiting for root device" due to missing /dev/mapper/xxx-root as ...
1
vote
1answer
751 views

PF: Block all, but one subnet firewall rule?

I'm trying to do something that I thought would be relatively simple: Block all the traffic to a test server, other than my company's subnet. I've tried things along these lines (111.111.0.0 is my ...
0
votes
1answer
743 views

Filter python messages with regex in syslog-ng

I have syslog-ng (v3.4.7) configured to catch almost all messages in their respective logs, but recently I've included some python scripts in crontab and their output just goes to messages or debug ...
1
vote
3answers
208 views

drop ips with iptables from awk result [closed]

I have a log file like this : Frq:15 IP:0.0.0.0 Date: 2014-03-21 12:19:31 AM Frq:9 IP:198.252.206.25 Date: 2014-03-21 12:19:31 AM Now i get column of ip addresses with awk : cat /tmp/test | awk ...
4
votes
4answers
621 views

How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?

EDIT: Edited my examples to reflect that I was indeed attempting this with the switch in "configure" mode. Still no joy. EDIT: I've done some more searching on this issue. I just can't seem to see it ...
0
votes
1answer
1k views

How to configure postfix/dovecot setup to reject certain mail

I followed this (https://workaround.org/ispmail/squeeze/big-picture) tutorial to set up my mailserver and it works very well. I'd like to be able to reject email from certain users or if it contains ...
0
votes
1answer
266 views

Proftpd - Disable AllowFilter on sub-folders

I'm trying to set up my ftp server properly, but I have a problem with the AllowFilter. The Description: I want to restrict all commands by default and only allow a few. That works. However. As you ...
0
votes
1answer
164 views

Site security - how to filter incoming traffic to a specific port

Just ran a security test on ScanMyServer.com, the results showed a medium risk vulnerability: Database Reachable from the Internet Summary: The remote host is running a database server that is ...
1
vote
1answer
115 views

Using mime_header_checks to ACCEPT instead of REJECT?

I'm pretty well versed in using header_checks/mime_header_checks to refuse smtp mail in Postfix, but now I think I've gone off the path of righteousness; I'm trying to suss out a way that I can refuse ...
3
votes
3answers
1k views

Filter the output of a log file

Question I've a log-File which display all console-logs of my website in the range of 10.Oct to 1.Nov, start with the logs of 10.Oct. I need all logs from the range of 25.Oct until today. The problem ...
0
votes
1answer
188 views

Rsync filter and ignore some directories

I'd like to rsync a directory that contains a Python 3 app on my server. The directory has files I'm interested in: the files that end with .py And there are the files I'd like to be ignored (these ...
0
votes
1answer
65 views

Copy directories modified by specific users within a certain time frame from an FTP [closed]

I am trying to cleanup a 12TB Windows FTP with several million files. Basically, I want to keep the directories that are still being used by a specific subset of users who had access, and only keep ...
1
vote
1answer
299 views

syslogd filtering not working on FreeBSD

I am failing to get filtering by program or facility working in FreeBSD syslogd. I added local6.debug /var/log/test.log !testd *.debug /var/log/test.log to my ...
0
votes
1answer
93 views

Tell Postfix to pipe From certain emails to certain scripts

I am currently using Postfix to pipe incoming email form our support email address to our WHMCS install to the support department. This has been working great for sometime. Problem is now we have a ...
4
votes
1answer
2k views

More Searchfilters in AuthLDAPURL

Is it posible to have more then one searchfilter in AuthLDAPURL? Example uid filter: <Location /test/> AuthType Basic AuthName "Test" AuthBasicProvider ldap ...
1
vote
2answers
780 views

PowerShell filter files by date in name

I have many files with different names per day. How can I filter them by the date in their name? For example: app_20130505.log app_20130506.log app_20130507.log app_20130508.log app_20130509.log ...
1
vote
2answers
66 views

Rsync Include and Exclude with Dates

I have a bunch of log files that I sync with another server using rsync. The log files are all named in the format YYYY-MM-DD XXX.txt. I only want to sync the current month and last month of logs ...
0
votes
1answer
213 views

Date variables within rsync filters?

I have an rsync script that syncs logs files from a remote server. The log files are always named YYYY-MM-DD-HH-MM-SS. At the moment, I have a filter in place to only get the current year's logs: ...
0
votes
3answers
119 views

Which bit represents which TCP flag?

For instance, a WireShark capture filter example I found - tcp[13] & 8 == 8 represents packets with PSH flags. How do I count the 8 ? Based on the wikipedia image, PSH is in the middle of ...
1
vote
1answer
64 views

RSYNC Filters Conflicting

I've had to break my rsync tasks down into smaller jobs given the size of my directories. Essentially, I'm doing it alphabetically (i.e., script that syncs folders starting with A-D, E-H, etc, etc). ...
-1
votes
1answer
74 views

Force every HTTPS to one url

Is there a bug free way to redirect/forward all HTTPS requests which forwarding through a router to one url ? I want to redirect all clients https to specific page something like hotspots walled ...
3
votes
2answers
1k views

Filter tcpdump file AFTER capturing

I captured a really big tcpdump file which now always crashes my wireshark. It was captured with no filters and I need to apply some afterwards to make the file smaller. Is this somehow possible?
-1
votes
1answer
200 views

exim or dovecot plugin or filter to put body preview to header [closed]

Is there any filter which would allow me to have the plain or html text body synopsis (preview) in the mail header as well? Like SpamAssassin does for spam emails (it inserts X-Spam-Report header with ...
2
votes
2answers
1k views

Linux ldap authentication, pam_filter ignored

I've set up linux client authentication via ldap, it works. I want to control user's access to several services by adding or removing different OUs for accounts. E.g., if user is allowed to login ...
3
votes
1answer
478 views

Reduce munin logging level

Munin is quite verbose, and logs a bunch of things into munin-graph.log, munin-html.log, munin-limits.log and munin-update.log at each run of munin-cron. I already reduced munin-node logging level by ...
4
votes
1answer
410 views

Is null return path reliable indication of a bounce?

I have a mailbox that receives bounces as well as normal email (the latter includes messages from automated services). I want to filter out the bounces and forward them to another mailbox. Assume I ...
-1
votes
1answer
1k views

Free firewall for Windows Server 2003 [closed]

We have a Windows Server 2003 R2 Machine here at work that I need to ensure is accessible only from specific set of IP Addresses. The Server is on a LAN and I am aware that one of the possible ...
0
votes
1answer
469 views

Exchange 2003 delete all message from a sender

I would like to remove all old message from a sender in all mailboxes of exchange 2003 server. This because in my company there is a very bad habit: to use scan to email, then i need to remove all ...
1
vote
1answer
300 views

How to allow a single domain name with iptables

I am looking for a way to make iptables only accept requests for my domain name and reject the others. Lately I misconfigured my apache proxy, it is now fixed, but I keep receiving a load of requests ...
0
votes
1answer
447 views

exim system filter foranyaddress condition wont work

i am trying to setup exim system filter, it should be skipped for certain recipients, but condition always fails: Filter looks like: # Exim filter if foranyaddress $h_to: ( $thisaddress contains ...
-5
votes
3answers
348 views

Cell Tower IP Address Blocks [closed]

I am thinking of creating an app that only allows users connected via a cell tower. Are there IP ranges that are only used by cell towers? I realize that it may be a 'moving target', but does anyone ...
0
votes
1answer
713 views

postfix/dovecot filter who can send mail on behalf of

I am using postfix + dovecot(imap+pop3) + mysql I whant to explicity define users or groups that can send email on behalf of others I was thinking doing this way: for all local(mysql) authenticated ...
0
votes
1answer
91 views

What I can do to achieve this kind of smtp proxy

I'm providing VPS services and I don't want my IP addresses spoiled by spammers. What I want to achieve here is to route all the outbound traffic to some sort of smtp proxy server which will just let ...
0
votes
1answer
744 views

exim filter for unseen delivery to multiple addresses

I need to forward all mail to an address on to two other addresses, whilst keeping a copy of the original email. I've got the following exim filter set up: unseen delivery address@anotherdomain.com, ...
1
vote
1answer
319 views

trigger script on postfix delivery errors

I'm trying to get postfix to run a script on soft (4xx) and hard (5xx) delivery errors, but I'm not sure where to start. If I understand things correctly, I could insert (pipe-based) filters in the ...
1
vote
1answer
377 views

Archiving mails with postfix: how to filter mails?

i wanto to implement the following scenario: we use a postfix mailserver. to archive all old and new mails, i want to setup a second postfix on our fileserver and create a single mailbox "archive". ...
3
votes
1answer
75 views

How do I check whether an administrator has viewed the security audit log?

A colleague and I have been discussing an IS audit demo on Windows. One point we'd like to cover is that an administrative/high-privilege user should view the security log within X hours of a failure ...
1
vote
3answers
6k views

Use MikroTik Bridge as a Public IP Firewall for Public Hosted Servers

We want to do this: Internet<->MikroTik in Bridge Mode with Firewall Filter<->Hosted Server The primary objective is to allow RDP and FTP in from the outside but block everything else from ...