The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
70 views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
0
votes
0answers
14 views

How to filter ObjectName in Windows logs with Advanced XML Filtering?

I want to deploy a centralized log analysis tool on my domain. I'm currently configuring Windows to audit a shared network drive (read, write, access attempt of domain users) to forward Windows events ...
0
votes
1answer
18 views

Dumping Splunk Events

We have a nagios instance set up so that using MK-Livestatus and splunk, we are able to push all of nagios's alerts through livestatus's socket thanks to a call from splunk. However, splunk is now ...
1
vote
1answer
24 views

Add Filter Based on Client Certificate Name (OpenVPN)

Can anyone show me how to filter (change bandwidth, delay, etc) of one or more users connecting to OpenVPN based on their Client Certificate Name? Why I would like to use the Client Cert name is I ...
0
votes
0answers
11 views

Trim and filter functions in NFLOG

I have a tricky task to fulfill: I need to reduce the memory-size of my log on the disk space. Due to customer demand, I have work in a Linux environment with NFLOG. Another security restriction I ...
0
votes
1answer
92 views

how to control ldap users access using groupdn?

i am using openldap, nslcd and nss-pam-ldapd. i want to restrict users login to ldap client. i have configured this in centos6.5 without any problem using groupdn. but in centos 7, there is no ...
1
vote
0answers
25 views

How to block a users name from getting mail using postfix

I have a setup where I use /etc/aliases to define several email addresses for a user, e.g.: foo: user bar: user foo.bar: user However I want to block the users name (user@domain.com) from ...
0
votes
0answers
30 views

ubuntu 14.04 LTS issue with tc filter command

Friends, I am using HTB queues in an output port, and my filter condition uses both destination MAC address and VLAN ID. I am having problems to make this filter work together. I have tried almost ...
-1
votes
1answer
55 views

HP ProCurve 2920, MAC filter

I have few HP 2920. They are connected to another HP modular switch via uplinks. When I check which devices are connected via MAC I can only see MAC addresses on uplink ports (idk why I can't see ...
2
votes
1answer
104 views

Use Windows PowerShell to find and delete files from specific owner

Because of a ransomware attack (no big deal, all recovered from backup) I want to clean up the directories and sub directories on the network share where the attack happened to create a lot of ...
0
votes
0answers
23 views

Emails ending up in gmail spam folder [duplicate]

Emails from my dedicated server are ending up in spam folder in gmail even though the server is not blacklisted and with good reputation - see below. the server level issues that would cause this ...
0
votes
0answers
164 views

Postfix capture messages exceeding limit

Is it possible to capture/filter messages that are exceeding the limit that has been set in the postfix configuration, and forward the captured mails to an external id? thanks in advance. EDIT : We ...
0
votes
1answer
322 views

Transparent HTTP/HTTPS domain filtering proxy [closed]

I want to set up a transparent HTTP/HTTPS proxy to filter outbound requests based on destination hostname (domain). The proxy itself should be non-intrusive and just forward traffic, not decrypt/...
1
vote
1answer
50 views

How to re-open the port?

I've a server with root access, I opened the 4022 port for ssh and it was working very well before, Today I try to connect on my server via ssh, but nothing happened, so I checked that via nmap and it'...
1
vote
1answer
144 views

Powershell to exclude Group Members from Dynamic Distribution List

I am attempting to remove specific users from a Dynamic Distribution List. I have searched and toyed with my PowerShell script for sometime with no luck. I'm sure it is something I am overlooking as I'...
1
vote
0answers
44 views

How do I set Host Groups on Fail2ban for Wordpress?

I'm trying to set up a custom filter for fail2ban on a wordpress site. I've been following this tutorial but when I try to test my custom filter, I get the error: server.failregex.RegexException: No '...
1
vote
0answers
173 views

rsyslog filter on authpriv facility in rsyslog.conf

This has been addressed in other post(s), but I still can't get this to work properly. I am trying to OMIT (discard) certain entries from being written to my " /var/log/secure ". Namely, any line ...
2
votes
3answers
159 views

How to filter a LDAP query for users which are authenticated? [closed]

I want to check if a user is authenticated right now for my Windows domain. For that I want to use an LDAP query. I learned that there is a group "Authenticated Users" (S-1-5-11) which might do the ...
0
votes
2answers
2k views

Logstash: UNIX Epoch time not getting converted to readable format

I have setup an ELK stack and I am trying to parse squid log entries. And I am having a problem trying to convert the following UNIX/Epoc time as 1442469455.757 to a human readable format. While ...
-1
votes
1answer
71 views

When should I use the different tables in iptables?

I am new to iptables and a bit confused. What I would like to know is, for example, if I need to block a certain IP from accessing my server, should I add the rule to the mangle table or the filter ...
1
vote
1answer
151 views

Exim - add footer to all outgoing emails except for one user

I am currently managing an email server that is being handled by Exim 4.85 This server currently adds a footer to all outgoing messages. The line that adds this functionality can be found on several ...
0
votes
0answers
98 views

Filter packets with layer 7 (raw) data with iptables

Let's suppose I've got the following iptables rule: iptables -A INPUT -p tcp -s $IP --sport $PORT -j DROP filtering (and dropping, in this case) packets coming from $IP:$PORT. This filter drop ...
0
votes
1answer
208 views

Disable logging ip adress to access.log in lighttpd

I have my webserver configured with lighttpd/1.4.31. About 80% of all entries in lighttpd's /var/log/lighttpd/access.log consist of my own ip address. I would like to disable my ip address logging ...
1
vote
1answer
236 views

Filter getent passwd output with SSSD

I am using ldap_access_filter in sssd.conf in order to limit access to users that are in a specific ldap group. However, when I do a "getent passwd" I still get a full list of the ldap users. How can ...
0
votes
1answer
144 views

Fail2Ban Filter Errors

I'm trying to add two fail2ban filters, one for post flood and phpmyadmin brute force but i get the following errors. logs: fail2ban.filter : ERROR No 'host' group in '[[]client []] File does not ...
0
votes
2answers
51 views

Redirect a port to a blocked port but with the filter to unlock it

I have all ports with iptables dropped for security reasons, now i want to open a port which redirects the traffic to a blocked port, but it will open if the traffic comes to this port. Let's see, i ...
1
vote
4answers
4k views

How can the SSDP protocol be filtered out of Wireshark view?

In Wireshark version 1.12.4, I am trying to filter out packet messages with an SSDP protocol. When I clicked the Expression button next to the Filter field, and selected "HTTP" (as Field Name) and "...
2
votes
1answer
283 views

How are filters combined in syslog-ng

If I've got an entry in syslog-ng log { source (src); filter (filter1); filter (filter2); filter (filter3); filter (filter4); destination (all_log) } And, say filter4 is a very ...
6
votes
1answer
77 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
1
vote
0answers
29 views

Applying filter on mail from specific subnet in postfix [duplicate]

I'm trying to get the following to work: We have a postfix relay on the edge of our network, accepting all mail from our internal LAN & DMZ. What we are trying to get to work is limiting the ...
0
votes
1answer
51 views

Make ProFtpd ignore a blank command

Is there a way to make ProFtpd ignore a blank command? Now it says "500 Invalid command: try being more creative" This confuses a client ftp program. The client (which I can't change) issues blank ...
3
votes
1answer
2k views

Clearing out Barracuda 310 web filter DNS/site cache?

On my network I have a Barracuda 310 web filter installed. After an issue with our ISP suddenly interrupting our DNS service, we switched over to a more reliable DNS on all of our systems. ...
0
votes
1answer
226 views

Tcpdump advanced filters

i want ask for command can Get only the IPs have more then 1 connection with different source port xxx.xxx.xxx.xxx:X | xxx.xxx.xxx.xxx:Y (example) if IP1 has connection to server with Src Port X ...
1
vote
0answers
200 views

What does Nginx Proxy Filter in Fail2ban really do?

What does Nginx Proxy Filter in Fail2ban really do? I am currently setting up Fail2Ban for Nginx. Almost everywhere I've read, they all have included a setting for [nginx-proxy] proxy filter. From ...
0
votes
1answer
603 views

Postfix: Pipe to script bounces sent to specific virtual user

I'm building a small ticket system where basically some mail accounts of my email server are piped into a PHP script that will take care of the emails. The server is running, I can send email over ...
0
votes
1answer
2k views

sed fix for BusyBox - boot fail unable to mount LVM

BusyBox why u no vi?! Summary: Ubuntu 14.04 Server after upgrade first boot, only boots to BusyBox v1.21.1 initramfs with "gave up waiting for root device" due to missing /dev/mapper/xxx-root as ...
1
vote
1answer
1k views

PF: Block all, but one subnet firewall rule?

I'm trying to do something that I thought would be relatively simple: Block all the traffic to a test server, other than my company's subnet. I've tried things along these lines (111.111.0.0 is my ...
0
votes
1answer
1k views

Filter python messages with regex in syslog-ng

I have syslog-ng (v3.4.7) configured to catch almost all messages in their respective logs, but recently I've included some python scripts in crontab and their output just goes to messages or debug (...
1
vote
3answers
366 views

drop ips with iptables from awk result [closed]

I have a log file like this : Frq:15 IP:0.0.0.0 Date: 2014-03-21 12:19:31 AM Frq:9 IP:198.252.206.25 Date: 2014-03-21 12:19:31 AM Now i get column of ip addresses with awk : cat /tmp/test | awk '{...
4
votes
5answers
2k views

How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?

EDIT: Edited my examples to reflect that I was indeed attempting this with the switch in "configure" mode. Still no joy. EDIT: I've done some more searching on this issue. I just can't seem to see it ...
1
vote
1answer
3k views

How to configure postfix/dovecot setup to reject certain mail

I followed this (https://workaround.org/ispmail/squeeze/big-picture) tutorial to set up my mailserver and it works very well. I'd like to be able to reject email from certain users or if it contains ...
0
votes
1answer
423 views

Proftpd - Disable AllowFilter on sub-folders

I'm trying to set up my ftp server properly, but I have a problem with the AllowFilter. The Description: I want to restrict all commands by default and only allow a few. That works. However. As you ...
0
votes
1answer
512 views

Site security - how to filter incoming traffic to a specific port

Just ran a security test on ScanMyServer.com, the results showed a medium risk vulnerability: Database Reachable from the Internet Summary: The remote host is running a database server that is ...
1
vote
1answer
227 views

Using mime_header_checks to ACCEPT instead of REJECT?

I'm pretty well versed in using header_checks/mime_header_checks to refuse smtp mail in Postfix, but now I think I've gone off the path of righteousness; I'm trying to suss out a way that I can refuse ...
3
votes
3answers
2k views

Filter the output of a log file

Question I've a log-File which display all console-logs of my website in the range of 10.Oct to 1.Nov, start with the logs of 10.Oct. I need all logs from the range of 25.Oct until today. The problem ...
1
vote
2answers
254 views

Rsync filter and ignore some directories

I'd like to rsync a directory that contains a Python 3 app on my server. The directory has files I'm interested in: the files that end with .py And there are the files I'd like to be ignored (these ...
0
votes
1answer
95 views

Copy directories modified by specific users within a certain time frame from an FTP [closed]

I am trying to cleanup a 12TB Windows FTP with several million files. Basically, I want to keep the directories that are still being used by a specific subset of users who had access, and only keep ...
1
vote
1answer
442 views

syslogd filtering not working on FreeBSD

I am failing to get filtering by program or facility working in FreeBSD syslogd. I added local6.debug /var/log/test.log !testd *.debug /var/log/test.log to my /etc/...
0
votes
1answer
132 views

Tell Postfix to pipe From certain emails to certain scripts

I am currently using Postfix to pipe incoming email form our support email address to our WHMCS install to the support department. This has been working great for sometime. Problem is now we have a ...
5
votes
1answer
4k views

More Searchfilters in AuthLDAPURL

Is it posible to have more then one searchfilter in AuthLDAPURL? Example uid filter: <Location /test/> AuthType Basic AuthName "Test" AuthBasicProvider ldap ...