The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
0answers
14 views

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
0
votes
1answer
45 views

Postfix block internal communications

I'd like to know how to block my users to send mail to each other but give them chance to send and receive external mail. john@localdomain.com <---> julie@localdomain.com REJECT ...
-1
votes
2answers
41 views

Postfix access restrictions

I use Postfix 2.9.6 from Debian7. Defined some virtual domains, all works fine as expected. Now I want to restrict incoming emails for one of my domains to accept email if it come from the same ...
1
vote
0answers
86 views

Restrict I/O Write usage using cgroups

I am trying to restrict I/O write usage on my server using cgroups. Here is my partition table info: major minor #blocks name 8 0 10485760 sda 8 1 9437184 sda1 8 ...
7
votes
1answer
483 views

Is it possible to restrict the use of a root certificate to a domain

My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate. Is it possible to configure a root ...
1
vote
1answer
51 views

smtpd_recipient_restrictions works but not always

I have POSTFIX set up to filter certain email addresses. The main.cf file contains: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blacklist, permit_mynetworks, ...
-1
votes
1answer
90 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
-1
votes
1answer
75 views

How to use ssh without knowing remote user's password? [closed]

I am trying to use ssh and login to a different mac (B) from my mac (A) but do not know B's password. Is there anyway of finding B's password or doing this without access to B?
1
vote
1answer
210 views

Impact of enforcing software restriction policies via GPO 2008r2

We are trying to prevent the execution of certain system related executables by regular users on our network (mmc, cmd, ldp, etc.). I have suggested the use of software hashing rules but I am ...
0
votes
3answers
3k views

postfix permit_sasl_authenticated in smtpd_client_restrictions for submission on 587

First let me explain my setup. I'm using postfix 2.9.6 on Debian Wheezy. I do not allow AUTH on port 25, and force MUAs to use a submission service on port 587 instead. Debian comes with the following ...
1
vote
1answer
169 views

Postfix does not reject wrong client and HELO name

I have a postfix server configured with reject_unknown_client_hostname and reject_unknown_helo_hostname. Regardless the server accepts non sasl_authenticated connections from clients and HELO names ...
0
votes
2answers
1k views

Group Policy - Software Restrictions

I've just set up a new server on a new Domain Controller. I have implemented my Group Policy too. However, I would like to implement a policy to restrict the installation of all software by users and ...
0
votes
1answer
1k views

Postfix check_policy_service - only checking incoming mail, ignoring internal and outgoing

I'm trying to set up a policyd server on Centos x64 (selinux disabled), which will allow me for limiting numer of messages incoming from different servers and (more important) outgoing from different ...
1
vote
2answers
1k views

Restricted Groups not working

I have several GPOs set up on our domain at work, in one GPO I have the group set to be Local Administrators via the Restricted Groups feature. However, when one of the users in this group logs in to ...
1
vote
2answers
382 views

Need Help locking down many networked public computers

Does anybody know any type of system lockdown/parental control software that will work for networked machines, with users that may or may have not already setup an account on the local machine? I'm ...
1
vote
1answer
255 views

Postfix changes to main.cf are not loaded

Ubuntu 10.04 LTS root@vm1613:/etc/postfix# vim /etc/postfix/main.cf [...] # default restrictions smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, ...
2
votes
2answers
2k views

How Can I prevent a specific application from being run on a specific machine using Group Policy?

I know this is possible to do and I am working on it with limited success. I believe the Group Policy I want is "Do Not Run Specified Windows Applications" - I can enable this and add the .exe I want ...
0
votes
2answers
340 views

GPO Software Restriction Policy

Just a quick little question here, i am trying to block exe's and such from running from users home drives but running into problems. Sure I can add a hash rule for all the exe's but this is tedious ...
0
votes
1answer
294 views

Add restrictions for files and folders naming on Windows

Is it possible, with Windows Seven pro, to add restrictions on the naming for files and folders? Let me explain: My users can't refrain from using characters like é, ô, or string like l'agence ++. ...
4
votes
3answers
235 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
1
vote
1answer
216 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
0
votes
1answer
993 views

Microsoft Exchange 2010 GAL Global Address List Restriction by OU Organizational Unit

We are offering hosted Exchange services and are in an Microsoft Exchange 2010 only environment with a Windows Server 2003 Domain Controller. My problem is that all the customers have access to the ...
2
votes
2answers
632 views

Searching For a Desktop Security Software to harden Windows machines, anybody?

I'm a network administrator of a small/medium network. I'm looking for a software (Free or Not) which can harden Windows Computers (XP And Win7) for the propose of hardening standalone desktop ...
2
votes
1answer
232 views

Is there any restriction of new incoming/outgoing TCP connections/seconds in Windows?

Is there any restriction of number of new incoming/outgoing TCP connections/seconds in Windows? If so, are there any differences between Windows versions?
1
vote
2answers
213 views

IIS IP Adress Restriction - can I rely on it online?

I have an idea I'd like to float to the smart people of serverFault to pick holes in it. I'm looking for a way to lock down a 3rd party application in IIS. It's a web service, so there's no login ...
1
vote
1answer
328 views

Setting IPv4 address and domaine restrictions in IIS7

I have a couple of sites that I want to only allow access to specific IPs. I have added these IP addresses to IIS7 via the IPv4 Address and Domain Restrictions functionality, as per the link below: ...
0
votes
1answer
501 views

is it possible to restrict printer tray usage on a printer using AD Group membership?

I have a multi tray laserjet printer that has a drawer dedicated to printing checks. I was curious if I could use Active Directory Group Membership to restrict who can print from that drawer to ...
0
votes
2answers
164 views

Launching a process with memory restrictions on linux

I've got a php/linux web site. My php processes periodically need to run executables to do things like manipulate images. I'd like to limit the amount of memory and CPU those sub-processes can ...
1
vote
2answers
406 views

Can someone with “send on behalf of” send to a restricted exchange distribution list?

I have distribution list that where I have set Message restrictions to accept messages Only from a set of users. Some of these users have secretaries, which can send on behalf of their manager. If the ...
0
votes
1answer
522 views

Administrator installing drivers gets Access Denied

Administrator user installed win server 2003 and now i can't install service pack 2 getting Access Denied. How can it be?
0
votes
2answers
308 views

Encryption container for multiple people

I was just wondering if anyone may have come across a product that would allow for a container based encryption to be used by multiple people, in a Windows Server setup. I wanted to see if there ...
0
votes
1answer
587 views

Is there some limit on a size of a file when force-downloading it with PHP on Apache?…

Trying to force-download file with PHP using usual: header("Content-type: $type" ); header("Content-Disposition: attachment; filename=$name"); header('Content-Length: ' . filesize($path)); And it ...
4
votes
3answers
2k views

Restrict a port to a single app

I'd like to restrict a range of udp ports to a single application (or a user). What I'd like to achieve is not simply blocking a bind() from other uids, but also remove the range from a pool that can ...