The tag has no wiki summary.

learn more… | top users | synonyms

7
votes
6answers
16k views

How does ping know that my packets are filtered?

I'm customer of an Irish ISP, eircom, which has started censoring the pirate bay. When I try to ping 194.71.107.15 which is the IP address of thepiratebay.com, I get this output: PING 194.71.107.15 ...
6
votes
2answers
1k views

How can I view log files in Linux and apply custom filers while viewing?

(I asked this question on stackoverflow but it might be better off here...) I need to read through some gigantic log files on a Linux system. There's a lot of clutter in the logs. At the moment I'm ...
6
votes
2answers
363 views

Data from a table in 1 DB needed for filter in different DB

I have a Win Form, Data Entry, application that uses 4 seperate Data Bases. This is an occasionally connected app that uses Merge Replication (SQL 2005) to stay in Sync. This is working just fine. ...
5
votes
3answers
1k views

Limit SSH login by originating interface

I want to allow anybody in the 192.168.1.0-192.168.1.255 range to be able to log in with a password or a SSH key, but people outside that range to only be able to log in with a SSH key. Can this be ...
5
votes
1answer
396 views

Block Google requests to 16k using pf firewall

I'd like to block access to Google search using PF after the threshold of 17500 requests (connection established) in 24h, from a host running FreeBSD 9. What I came up with, after reading pf-faq is ...
4
votes
1answer
10k views

Wireshark Display Filter protocol==TLSV1? (and PacketLength)

What would the filter expression be to just select the protocols where the protocol = TLSV1? Something obvious like protocol == "TLSV1" or TCP.protocol == "TLSV1" is apparently not the right way. ...
4
votes
2answers
1k views

How to set up server side message filters on sendmail/Imap server?

I currently have message filters set up in Thunderbird to put incoming email messages from various sources in appropriate server side folders. Since I envision starting to use a smartphone (Android) ...
3
votes
1answer
2k views

Using m0n0wall in a VM for testing

I'd like to use m0n0wall inside a (VirtualBox) VM to play about with and see what it can do. Ultimately the goal is to have a number of virtual machines connected to a internal virtual network which ...
2
votes
3answers
843 views

Snort Based Firewall

I have not worked with SNORT much or done too much research on this but it sounds possible. If I setup a server and run snort on it. Would it then be possible to route ALL my traffic through it like ...
2
votes
1answer
116 views

What is the risk in turning off Base Filtering System on Windows Server…?

Let me qualify that I am a developer so I may be naive. I have a program that requires TCP communication on our local network and the box does not need to be secure. I have had some API vendors in the ...
2
votes
1answer
234 views

iptables port forwarding only for a certain range of IP

I'm using LXC containers. Each one of my containers have an ip address in 10.0.3.0/24. I want the packets that come into my host on a certain port to be redirected to a container so I use this rule: ...
2
votes
1answer
59 views

In tcpdump filtering is “port” redundant with “tcp”?

Why would one want to force "tcp" in a "tcpdump" filter when using "port", given port numbers are defined in TCP Headers (as opposed to IP) In other words, is tcpdump tcp and port 10000 synonym to ...
2
votes
1answer
317 views

Iptables: Filtering only one interface on a router with multiple interfaces

The following are my firewall rules. eth1 is the WAN interface and all other are LAN interfaces. I want to filter INPUT and FORWARD chains only on eth1 (WAN interface). All other interfces need not be ...
2
votes
3answers
1k views

ProCurve ACL to prevent a subnet from leaving the switch

I have a single HP ProCurve 2610 in a remote location that is connected in with the rest of the network via SHDSL. There are two Layer-3 networks on this segment. ACLs are setup to deny one subnet ...
2
votes
2answers
1k views

Wireshark filtering-trying to filter out my own local ip

i'm trying to filter out my ip address(local address) "192.168.5.22" I used "ip.src != 192.168.5.22|| ip.dst !=192.168.5.22"(without quotes) and I keep seeing my address pop up im in a heavy traffic ...
2
votes
1answer
218 views

SQL Merge Replication - Filter Sets

I have a "working" Replication Set in SQL 2005 that we use in house to our users at remote branches on SQL Express 2005. I want to apply a filter to our biggest Set to help minimize the bandwidth ...
2
votes
2answers
5k views

Logging Bounced messages to a Database (Postfix with virtual domains/users)

We have a postfix installation with a couple of virtual domains each with virtual users. These domains and users are mapped using a mysql database. I have been until now tracking bounces by parsing ...
2
votes
2answers
927 views

Cisco ASA 5505 (8.05): asymmetrical group-policy filter on an L2L IPSec tunnel

I'm trying to find a way to setup a bi-directional L2L IPSec tunnel, but with differing group-policy filter ACLs for both sides. I have the following filter ACL setup, applied, and working on my ...
2
votes
1answer
32 views

Drop outgoing mail to previously unavailable mailboxes in exim using mysql database

we have a larger community portal which became bigger and bigger over the years but also has some dead accounts. Recently the ip of the server was blacklisted because many mail adresses of the users ...
2
votes
1answer
194 views

Windows Server Error Log Filter

How do I filter the Error Log (Windows Server 2008) for errors from one particular website hosted on the server? The site is using a unique Application Pool, and runs under the context of the ...
1
vote
2answers
919 views

Grep to find lines starting at pattern A until pattern B is matched

I have a log that contains bits like this: [2012-04-16 15:16:43,827: DEBUG/PoolWorker-2] {'feed': {}, 'bozo': 1, 'bozo_exception': URLError(error(110, 'Connection timed out'),), 'entries': []} ...
1
vote
2answers
82 views

Anti spam on Exchange 2007

I have just installed an exchange 2007 server. We are not using the edge server role. In Exchange 2007 are there enabled any out the box anti spam features? I can't see antyhing relating to anti spam ...
1
vote
1answer
14 views

Mailman Sender Filter RegEx not working

Does anyone have experience with sender filters using regular expressions with Mailman? I use this regex to automatically accept all emails in the form "john.doe@sales.my-domain.de" or ...
1
vote
1answer
59 views

IIS only serve requests with hostnames

What is the optimal way to configure IIS to block direct IP access to the server? Direct IP access is only used by malicious scanners that will troll the entire internet by ip looking for vulnerable ...
1
vote
1answer
83 views

Given an Amazon Web Service Security Group, how can I find out what the IP's are?

I'm looking at using a cloud service which has an AWS Security group... I've got a hardware firewall and a software firewall. I have no idea how to say: Given that security group, allow any ...
1
vote
4answers
976 views

How can i make settings in router to block certain websites during office hours?

My company wants to restrict access to some websites during office hours. How this can be achieved using Router or any other technique?
1
vote
1answer
686 views

Need help with IP filtering and port forwarding

I have a static IP assigned to me by my ISP. I want to access a server running tomcat in our network from outside the LAN. Can any one give a few pointers, to what I need to do, and where to start ...
1
vote
2answers
776 views

Monitoring VPN users on my network

My company runs filters on contents available for browsing and I have to check if everyone is respecting the browsing policies. Recently I have spotted some users activate OpenVPN on their ...
1
vote
1answer
347 views

How to remove duplicates in Exim .forward file?

I would like to remove duplicates messages in some mailing-lists (cross-list posting) in my Exim .forward file. I was using procmail before with these commands: :0 Wh: msgid.lock | /usr/bin/formail ...
1
vote
1answer
118 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
1
vote
1answer
137 views

How to filter TCP packets based on flags using Packet Filter

Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter. According to the documentation of the Packet filter: ...
1
vote
1answer
222 views

php input filtering, unwanted slashes in get and post params

How can I disable input filtering? Here is an example: echo "\$_GET: "; var_dump($_GET); echo "filter.default: "; var_dump(ini_get('filter.default')); echo "filter.default_flags: "; ...
1
vote
0answers
307 views

Network Server Cabinets - How does the ventilation work?

Recently I've been looking at a range of network server cabinets with a mesh door at the rear. At the top of the cabinet are ceiling mounted fans with dust filters attached. These fans suck air out of ...
1
vote
1answer
1k views

What is the best way to block IIS requests from a specific country?

I've been asked to do this before, but I just don't know an easy way to tell IIS (we're running 7.5) to block all requests coming from a specific country/countries. Does anyone know? I knew of an ...
0
votes
2answers
2k views

How do proxy servers filter https websites?

With my limited knowledge of HTTPS I started wondering: How do proxy servers filter HTTPS websites? I mean adding a proxy server is essentially a MITM attack which is what HTTPS was explicitly ...
0
votes
2answers
194 views

Postfix: Filtering Outgoing Mail According to Sender Subnet

I need some specific LAN subnets to send e-mail to only my corporate domain such as printers or kiosks. How it could be possible via Postfix?
0
votes
1answer
96 views

tc: packets filter

I need to drop UDP packets with specific UDP port number) on network interface (say eth0). On my setup the interface eth0 is part of the bridge. is it possible to do it using tc command? if yes, how? ...
0
votes
2answers
3k views

Open source antivirus/antispam/web filtering gateway [duplicate]

Possible Duplicate: Open Source Unified Threat Management Software Options I want to install firewall which have following features Antispam, Anti Virus, Webfiltering, Userwise access, ...
0
votes
1answer
887 views

Prevent DNS responses for specific domain completely

Situation: Server (Win 2008R2) is being used in a DNS (amplification) DDoS attack. Amplification factor is already down to 1: Set the DNS server to non-recursive and removed all root hints -> DNS ...
0
votes
2answers
483 views

Is it safe to ublock 587, SMTP submission port?

We have had problems before with SMTP port 25 (smtp) - some PC's were sending spam mail throught that port. So we blocked that and only allowed only outgoing smtp servers we needed. Howerver, i read ...
0
votes
1answer
135 views

Block only part of a website

I have to imagine this is something that gets done in corporate and home networks, but I seem to be choosing bad search terms and haven't found an answer. What I'm aiming to do is to block certain ...
0
votes
2answers
645 views

IP Address filter 'before' http secured connections for protection against DDoS attacks? [duplicate]

One technique to protect against DDoS attacks is to monitor the number or requests per seconds coming from a given IP address. Of course, IP addresses can be fakes, but let's assume this is not an ...
0
votes
1answer
956 views

how to filter NGINX access.log “generation”

Is there a way to tell NGINX NOT to generate certain information into access log? I have Cometchat installed and polls every x miliseconds, and this is OK, but how can I skip those calls be written ...
0
votes
3answers
322 views

sendmail rules for filtering spam

Can anyone help me with constructing sendmail rules for limiting spam? Assuming that name of my domain is my.domain.com, I want to use following rules: If BOTH sender and recipient address is from ...
0
votes
1answer
338 views

Postfix : intercept outgoing email by sender with amavis or custom filter?

we have some outgoing mail server with latest postfix and amavis. I would need to intercept some outgoing email for some given senders and forward them to a "logging" account + the regular receivers. ...
0
votes
2answers
986 views

How to configure linux routing/filtering to send packets out one interface, over a bridge and into another interface on the same box

I'm trying to test a ethernet bridging device. I have multiple ethernet ports on a linux box. I would like to send packets out one interface, say eth0 with IP 192.168.1.1, to another interface, say ...
0
votes
1answer
215 views

how to redirect to different URL? [closed]

I want to redirect the request to my machine to another URL[not IP address]. Is there any way to achieve this using iptables?.. or what is the way to achieve this?..
0
votes
1answer
95 views

Taking mail header order in consideration when filtering

My incoming mail server is checking SPF and adds a line in the headers accordingly. However sometimes previous servers are adding similar headers so there is multiple Received-SPF headers. ...
0
votes
2answers
60 views

Filtering Live Messenger traffic by contacts

I am looking for a filtering solution to be able to filter Live Messenger traffic according "with who" they are chatting. We use Messenger for work, but some of collegues gets a lot of "out of work" ...
0
votes
1answer
697 views

Postfix filter outbound mail with allow-only rules

Essentially I only want to allow my CentOS box to send mail to specific addresses (with patterns if possible). Such addresses would be: user@domain.tld user+*@gmail.com (in this instance I am ...