The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
56 views

Apache with reverse proxy limited to an URL pattern + auth

I'v currently an Apache reverse proxy setup with authentication working (see hereunder). However, I would like to do reverse proxying for only some particular URL pattern, otherwise do nothing (or ...
0
votes
2answers
85 views

Postfix: Filtering Outgoing Mail According to Sender Subnet

I need some specific LAN subnets to send e-mail to only my corporate domain such as printers or kiosks. How it could be possible via Postfix?
2
votes
1answer
94 views

What is the risk in turning off Base Filtering System on Windows Server…?

Let me qualify that I am a developer so I may be naive. I have a program that requires TCP communication on our local network and the box does not need to be secure. I have had some API vendors in the ...
2
votes
1answer
77 views

iptables port forwarding only for a certain range of IP

I'm using LXC containers. Each one of my containers have an ip address in 10.0.3.0/24. I want the packets that come into my host on a certain port to be redirected to a container so I use this rule: ...
0
votes
0answers
25 views

Smart URL filter

I'm looking for a way to 'intelligently' filter websites on multiple machines residing in multiple networks, distributed geographically. I have a list of about 40 allowed sites (domains) that I want ...
1
vote
1answer
78 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
0
votes
0answers
68 views

Rsyslog filter packets from input file before sending to remote rsyslog host

I have my rsyslog configured to send logs from a logfile to a remote host $InputFileName /var/log/app/app.log $InputFileTag app $InputFileSeverity info $InputFileFacility local7 ...
1
vote
1answer
41 views

IIS only serve requests with hostnames

What is the optimal way to configure IIS to block direct IP access to the server? Direct IP access is only used by malicious scanners that will troll the entire internet by ip looking for vulnerable ...
2
votes
2answers
223 views

Wireshark filtering-trying to filter out my own local ip

i'm trying to filter out my ip address(local address) "192.168.5.22" I used "ip.src != 192.168.5.22|| ip.dst !=192.168.5.22"(without quotes) and I keep seeing my address pop up im in a heavy traffic ...
-1
votes
2answers
42 views

How to filter email based on sender address

This is my first post to serverfault, so I hope you excuse me for asking what may seem like an obvious question. I have tried running a few Google searches, but I really don't know where to begin. ...
0
votes
1answer
210 views

Postfix : intercept outgoing email by sender with amavis or custom filter?

we have some outgoing mail server with latest postfix and amavis. I would need to intercept some outgoing email for some given senders and forward them to a "logging" account + the regular receivers. ...
0
votes
1answer
677 views

Prevent DNS responses for specific domain completely

Situation: Server (Win 2008R2) is being used in a DNS (amplification) DDoS attack. Amplification factor is already down to 1: Set the DNS server to non-recursive and removed all root hints -> DNS ...
0
votes
0answers
52 views

Blocking torrents on PPTP/OpenVPN/IPSec [duplicate]

I run a VPN network and because of DMCA complaints in the USA I have to block torrent traffic. I have tried the following: iptables -t filter -A FORWARD -m string --string "BitTorrent protocol" ...
0
votes
1answer
120 views

Squid “refusing connections” with big ACL

I've successfully set up squid and it's working as is should. I'm using "Squidman" on OS X Server (underlying squid version is 3.1.12). However, I want to use squid to block certain porn sites, so I ...
1
vote
1answer
106 views

How to filter TCP packets based on flags using Packet Filter

Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter. According to the documentation of the Packet filter: ...
1
vote
1answer
173 views

php input filtering, unwanted slashes in get and post params

How can I disable input filtering? Here is an example: echo "\$_GET: "; var_dump($_GET); echo "filter.default: "; var_dump(ini_get('filter.default')); echo "filter.default_flags: "; ...
1
vote
1answer
74 views

Given an Amazon Web Service Security Group, how can I find out what the IP's are?

I'm looking at using a cloud service which has an AWS Security group... I've got a hardware firewall and a software firewall. I have no idea how to say: Given that security group, allow any ...
2
votes
3answers
517 views

Snort Based Firewall

I have not worked with SNORT much or done too much research on this but it sounds possible. If I setup a server and run snort on it. Would it then be possible to route ALL my traffic through it like ...
0
votes
2answers
2k views

How To Enable URL Filtering With Just Squid & C-ICAP

Before I posted this question, I read several set up guides online, the squid docs, c-icap docus, and also the ICAP RFC (3507). Unfortunately, the documentation for SQUID and C-ICAP does not provide ...
0
votes
1answer
161 views

Filtering inbound traffic without knowing the destination subnet

I have a linux machine configured as a router with two interfaces facing LAN A and LAN B. I want to filter traffic passing from LAN A to LAN B (inbound traffic) using tcpdump, but I don't have the ...
2
votes
1answer
50 views

In tcpdump filtering is “port” redundant with “tcp”?

Why would one want to force "tcp" in a "tcpdump" filter when using "port", given port numbers are defined in TCP Headers (as opposed to IP) In other words, is tcpdump tcp and port 10000 synonym to ...
5
votes
1answer
311 views

Block Google requests to 16k using pf firewall

I'd like to block access to Google search using PF after the threshold of 17500 requests (connection established) in 24h, from a host running FreeBSD 9. What I came up with, after reading pf-faq is ...
0
votes
3answers
475 views

Domino 8.5.3: Modify Subject of Incoming Email

I am a newbie in managing and development for Domino. Recently, I have request from other teams at work to set up a filter or agent for incoming mail. This is the requirement for the request: Look ...
0
votes
2answers
834 views

How to configure linux routing/filtering to send packets out one interface, over a bridge and into another interface on the same box

I'm trying to test a ethernet bridging device. I have multiple ethernet ports on a linux box. I would like to send packets out one interface, say eth0 with IP 192.168.1.1, to another interface, say ...
0
votes
1answer
208 views

how to redirect to different URL? [closed]

I want to redirect the request to my machine to another URL[not IP address]. Is there any way to achieve this using iptables?.. or what is the way to achieve this?..
-1
votes
1answer
64 views

Trying to colate click fraud evidence [closed]

We've recently had some very heavy and unexpected Google adwords spikes recently, so I'm trying to work through the server logs to find out if we've been subject to click fraud. What I don't know is ...
2
votes
1answer
288 views

Iptables: Filtering only one interface on a router with multiple interfaces

The following are my firewall rules. eth1 is the WAN interface and all other are LAN interfaces. I want to filter INPUT and FORWARD chains only on eth1 (WAN interface). All other interfces need not be ...
2
votes
3answers
940 views

ProCurve ACL to prevent a subnet from leaving the switch

I have a single HP ProCurve 2610 in a remote location that is connected in with the rest of the network via SHDSL. There are two Layer-3 networks on this segment. ACLs are setup to deny one subnet ...
1
vote
0answers
267 views

Network Server Cabinets - How does the ventilation work?

Recently I've been looking at a range of network server cabinets with a mesh door at the rear. At the top of the cabinet are ceiling mounted fans with dust filters attached. These fans suck air out of ...
1
vote
2answers
644 views

Grep to find lines starting at pattern A until pattern B is matched

I have a log that contains bits like this: [2012-04-16 15:16:43,827: DEBUG/PoolWorker-2] {'feed': {}, 'bozo': 1, 'bozo_exception': URLError(error(110, 'Connection timed out'),), 'entries': []} ...
0
votes
1answer
101 views

Block only part of a website

I have to imagine this is something that gets done in corporate and home networks, but I seem to be choosing bad search terms and haven't found an answer. What I'm aiming to do is to block certain ...
0
votes
2answers
117 views

Create filter type of folder/mailbox with Dovecot

Note: various people/cultures/background call these things differently, I will call them folders (as seen by a mail client) so most readers should understand. The question is: with Dovecot is it ...
0
votes
1answer
82 views

Taking mail header order in consideration when filtering

My incoming mail server is checking SPF and adds a line in the headers accordingly. However sometimes previous servers are adding similar headers so there is multiple Received-SPF headers. ...
0
votes
1answer
95 views

SMTP filtering proxy

I provide SSH shells to a lot of people and block port 25, 465 and so on by default via iptables to avoid that some people send spam messages. Is there some kind of SMTP filtering proxy or -gateway ...
2
votes
1answer
182 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
-3
votes
1answer
2k views

How to get Comcast to stop blocking me? [closed]

I am a web developer running a demo server at home. My site is accessible from Atlanta as well as via my local cellular network. However, both a webserver I have in Utah and a webserver of a service ...
0
votes
2answers
542 views

IP Address filter 'before' http secured connections for protection against DDoS attacks? [duplicate]

One technique to protect against DDoS attacks is to monitor the number or requests per seconds coming from a given IP address. Of course, IP addresses can be fakes, but let's assume this is not an ...
0
votes
2answers
60 views

Filtering Live Messenger traffic by contacts

I am looking for a filtering solution to be able to filter Live Messenger traffic according "with who" they are chatting. We use Messenger for work, but some of collegues gets a lot of "out of work" ...
0
votes
1answer
93 views

tc: packets filter

I need to drop UDP packets with specific UDP port number) on network interface (say eth0). On my setup the interface eth0 is part of the bridge. is it possible to do it using tc command? if yes, how? ...
0
votes
1answer
568 views

Postfix filter outbound mail with allow-only rules

Essentially I only want to allow my CentOS box to send mail to specific addresses (with patterns if possible). Such addresses would be: user@domain.tld user+*@gmail.com (in this instance I am ...
0
votes
2answers
2k views

How do proxy servers filter https websites?

With my limited knowledge of HTTPS I started wondering: How do proxy servers filter HTTPS websites? I mean adding a proxy server is essentially a MITM attack which is what HTTPS was explicitly ...
0
votes
1answer
128 views

Outbound mail filtering against custom black list

Does anybody have any recommendations on how to filter outgoing email against a custom black list? For example, I have a list of around 400,000 email addresses that I do not want to send email to. ...
0
votes
1answer
822 views

How to write proper XPath query for filtering certain application pool errors in Windows 2008 R2 Event log (“Applications” section)

does someone know how to write proper XPath query for filtering certain application pool errors in Windows 2008 R2 Event log ("Applications" section)? EventData in XML view from Application eventlog ...
0
votes
1answer
2k views

How to change the URL category of a website, so it's not filtered

This may be out of my control, but currently, when I try to access my website from work, I get this page: Access Denied Your system policy has denied access to the requested URL. Monitoring of Your ...
0
votes
1answer
3k views

Windows Filtering Platform not turning off until admin logon. Win2008R2sp1

Just installed Windows Server 2008R2 SP1 to see if it would fix this problem, but it didn't. Until an administrator logs onto the domain controller, there are many events that WFP blocked a connection ...
0
votes
1answer
873 views

how to filter NGINX access.log “generation”

Is there a way to tell NGINX NOT to generate certain information into access log? I have Cometchat installed and polls every x miliseconds, and this is OK, but how can I skip those calls be written ...
0
votes
3answers
306 views

sendmail rules for filtering spam

Can anyone help me with constructing sendmail rules for limiting spam? Assuming that name of my domain is my.domain.com, I want to use following rules: If BOTH sender and recipient address is from ...
0
votes
3answers
944 views

How to reject messages to unknown user in sendmail cooperating with MS-Exchange?

I have an MS Exchange 2003 configured as a mail server for an organization. As this server is located in this organization internal network and I don't want to expose it directly over internet, I have ...
1
vote
4answers
881 views

How can i make settings in router to block certain websites during office hours?

My company wants to restrict access to some websites during office hours. How this can be achieved using Router or any other technique?
1
vote
1answer
1k views

What is the best way to block IIS requests from a specific country?

I've been asked to do this before, but I just don't know an easy way to tell IIS (we're running 7.5) to block all requests coming from a specific country/countries. Does anyone know? I knew of an ...