The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
27 views

WS2012 RDP IP-whitelist not working

I'm running Windows Server 2012 with newest updates etc. We've at all times restricted our RDP with a whitelist with IP in the Scope properties of the "Remote Desktop - Usermode" rule inside the ...
1
vote
1answer
48 views

Using a whitelist too large for an AWS VPC Security Group

I have a large list of IPs I need to whitelist for a VPC instance. I've added as many ranges as possible to the security group until I ran out of available rules. I'm adding rules for HTTP and HTTPS ...
0
votes
0answers
21 views

Ansible whitelist directory contents?

In conf.d-style application configurations, it's useful (for security, auditing, and version control) to be able to say that "only the templates listed are present in the directory". There are a few ...
1
vote
1answer
38 views

How Does DNSWL work? How can I gain better trust? [closed]

How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust? Do some companies report "good" servers? Or will the score go up with time without reporting ...
0
votes
0answers
36 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
0
votes
0answers
62 views

Pulling docker images from behind whitelisted proxy

I'm attempting to deploy my application using docker on a corporate AWS instance that sits behind a http proxy. I have installed docker and whitelisted the base image pull address. However when I ...
0
votes
1answer
22 views

ip range whitelist error

I need to whitelist an ip range for our load testing with Loadimpact. They have given us an ip list with ranges listed as: 54.80.0.0/13 (54.80.0.0 – 54.87.255.255) ...
4
votes
1answer
195 views

How to blacklist or whitelist lots or few ip ranges with ipset and iptables + fail2ban

EDIT: It's astonishing how the urge to find a solution sometimes is sufficient to slowly but steadily lead one towards a solution. Also, the more often I reread my question in order to clarify it, I ...
-4
votes
1answer
39 views

Preventing operating systems from being installed on a server [closed]

Is it possible to blacklist certain operating systems from being installed on a server? Example scenarios: 1) There is an existing physical server, with no operating system. Is there a way to block ...
-1
votes
1answer
791 views

Whitelist Elastic Load Balancer based on IP [closed]

I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS ...
0
votes
1answer
507 views

AWS Elastic Load Balancer : white list only my IP

My objective: To make my AWS Elastic Load Balancer hittable by only traffic from my ip. What I have tried: created a security group in EC2 security groups set an inbound rule that allows all ...
0
votes
2answers
988 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
2
votes
1answer
501 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
1answer
78 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
207 views

How do I create a firewalld whitelist?

I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
1
vote
1answer
331 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy. So if HAProxy loads whitelists like this. acl whitelist src -f ...
-1
votes
1answer
201 views

nginx special directory whitelist extension

How can i set white list extension for special directory for my virtual host. I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
-1
votes
1answer
490 views

How to setup intermediate SMTP mail server / relay to filter outgoing emails

I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it? Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
2
votes
1answer
1k views

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this ...
1
vote
1answer
244 views

Whitelist nginx proxy_pass $args

I have nginx configured to proxy requests : server { listen 80; server_name proxy.mydomain.com; location /proxy { resolver 8.8.8.8; proxy_pass $args/; } } So ...
0
votes
1answer
1k views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
1answer
2k views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
976 views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
-1
votes
1answer
201 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
1
vote
0answers
65 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
0answers
273 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
1
vote
1answer
495 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
388 views

Best way to whitelist 1e100.net?

I'm trying to block all http/s traffic and whitelist a very small handful of websites. iptables works well to whitelist simple websites. It falls apart on the asynchronous client-to-other ...
0
votes
1answer
649 views

IPFire: allow whitelist only within time constraint

I am trying to get example 2 on this page: http://www.squidguard.org/Doc/examples.html working thru the IPFire interface, with the addition that the rule is applied only during a time constraint ...
0
votes
1answer
660 views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
1
vote
0answers
296 views

DD-WRT/TOMATO Whitelist openVPN connection for specified client MAC/IP

I will use these settings: # Allow these TRUSTED hosts unrestricted access iptables -A wanout -i `nvram get lan_ifname` -m mac --mac-source <allowed MAC #1> -j ACCEPT iptables -A wanout -i ...
-1
votes
1answer
598 views

Any way to Improve performance of iptables DDOS whitelist? [closed]

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and ...
1
vote
1answer
1k views

Can't receive password-protected archives in Exchange 2007

First off, the relevant environmental information: I'm running Exchange 2007 behind a Barracuda Spam & Virus Firewall 300. Recently, I've started using a service that sends me a monthly report. ...
2
votes
1answer
5k views

Open Windows Firewall to all connections from specific IP Address

Is it possible to "whitelist" an IP Address in the Windows Firewall and allow all connections from that specific address?
1
vote
1answer
545 views

DNS Whitelist Only [closed]

I want to set up a router to block the whole of the internet except for user-specified domains. Similar questions have been asked here (like this), but they're asked by people who are aiming to ...
3
votes
2answers
1k views

MySQL hosts cache: whitelist IP?

Is there a way to whitelist an IP address, so that max_connect_errors doesn't apply? The IP address for my office was blocked today due to too many connection errors to our new development MySQL ...
1
vote
1answer
1k views

How to white-list specific PHP script process in CSF?

I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must ...
1
vote
1answer
69 views

Can I easily setup a relay on a unix server which only accepts connection on a single IP?

I have a situation where I've developed a website on Windows and come to find only a single UNIX server has been white listed for the back end server-to-server information exchange that needs to be ...
-1
votes
2answers
447 views

VPN To Provide A Static IP Address [closed]

We are developing on a server with a client whose network does not have a VPN and restricts access to the server by a whitelist IP list. Many of our team members do not have static IP addresses as ...
4
votes
1answer
212 views

Restrict WSGI based on IP

So I have trac running on my debian server with the VirtualHost file looking like: ... WSGIScriptAlias / /srv/domain/trac.wsgi WSGIScriptReloading On <Directory /srv/domain/tracprojects> ...
3
votes
2answers
2k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
0
votes
1answer
2k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
2
votes
1answer
596 views

How to whitelist CloudFlare IP ranges within iptables rules (multiport)?

There seem to be many different ways to setup whitelist rules within iptables. What is the wisest way to whitelist the CloudFlare IP address ranges below via SSH? 204.93.240.0/24 (204.93.240.0 - ...
3
votes
3answers
2k views

Postfix restrict recipients

how can I configure postfix to allow sending to a certain (external) domain only? I'm already using check_recipient_access. Content of my /etc/postfix/recipients_restrictions: domain.com OK My ...
4
votes
1answer
534 views

DNS Resolver White List and block all other domains

A customer asked us to put on a DNS Resolver for its network. What he requests is: A list of allowed domains (white list) that the dns resolver can answer (anche cache) Any other domains outside the ...
2
votes
2answers
625 views

Simple SMTP relay with whitelist

I've got a test instance of a compiled web app (that I didn't write) which I'd like to do some testing with, however the app contains client email addresses that I would like to not receive emails ...
5
votes
1answer
3k views

How to configure postfix to only send to whitelisted addresses?

I want to configure postfix to only send mail to addresses in a whitelist. I have tried to use smtpd_recipient_restrictions in main.cf like so: smtpd_recipient_restrictions = ...
0
votes
1answer
475 views

Is whitelisting a CNAME enough?

We are working on setting up a list of domain names we need to have whitelisted for educational institutions who use our site. We are using AWS S3 as well as cloudfront. In our cloud front, we ...
0
votes
2answers
830 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
1answer
1k views

postfix global white/blacklist defined by pair

I have defined global whitelist in postfix using MYSQL with the following options: smtpd_recipient_restrictions = reject_invalid_hostname, check_client_access ...