The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
16 views

Why do we add Web Server Public IP Addresses to organization's safe senders list (whitelist)?

When we use SaaS applications they suggest to include both the email relay IP address and Web Server Public IP Addresses to organization's safe senders list (white list) but when I perform couple of ...
0
votes
0answers
27 views

Tomcat IP whitelist on conf/web.xml

I have a tomcat 7 installation on a EC2 server on Amazon. I have also a webapp deployed as a root in the webapp folder. I need to be able to block all the requests from any IP addresses for the path ...
1
vote
2answers
34 views

IP based link unreachable only from my VPS IP

I have my own windows VPS with IP address XXX.XXX.XX.XXX, i have ip based link ...
0
votes
0answers
21 views

Bypass DSpam For IPs or Domains/DSpam RBLs

I am trying to bypass DSpam for accounts that are local (on the same server). My server goes Exim, DSpam, dovecot. I have already bypassed Exim for the IPs that are on the server. I would like to be ...
1
vote
0answers
48 views

Problems whitelisting senders in Amavis-new

I've a CentOS6 server with Amavis 2.9.1 + Postfix 2.6.6 + clamav 0.99 that I use as mail relay (aka mail gateway), with network set as follow: eth0 (10.10.132.104) as external inteface eth1 ...
0
votes
1answer
106 views

rkhunter - deleted files - whitelist issues

I am working to secure a fresh Debian LAMP deployment and decided to include rkhunter (v1.4.2) in my security solution. I have run it using the following options: rkhunter -c --enable all --disable ...
0
votes
1answer
20 views

Let OS X ScreenSharing accept incoming connections only from a list of trusted IPs [closed]

As a security measure, is it possible to set up screen sharing on a remote Mac to accept connections only from a given list of IP addresses? (Of course I could set up a firewall to allow traffic on ...
0
votes
1answer
29 views

Modsecurity Whitelist and keep logging

I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time. SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" ...
0
votes
1answer
30 views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
0answers
22 views

Modsecurity: How can I consolidate all SecRules to ignore aparameter

How can I consolidate all or any secrule to ignore a parameter with modsecurity? I have a form that will always flag as XSS, unfortunately, my rule list is getting rather large as the site grows. I ...
1
vote
1answer
82 views

Protecting a location by IP while applying basic auth everywhere else

I want to achieve the following results: Apply basic authentication to ANY location, file, path Remove basic authentication for an IP/CIDR range whitelist Prevent ALL access to a specific directory, ...
1
vote
1answer
37 views

How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?

I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
3
votes
2answers
108 views

EC2 Security Group, restrict inbound access by hostname

I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point. In the EC2 security group console I can only ...
0
votes
0answers
34 views

postfix whitelist all incoming mail with a specific domain destination

Would it be possible to whitelist all incoming mails with a specific recipient domain. I have multiple domains running on my mailserver. I want to simply push thru all the incoming mails with a ...
0
votes
2answers
69 views

Locking down Azure Portal

My company does not want any staff to have access to our corporate Azure account from outside of our offices. So, is it possible to lock down the Azure Portal? Preferably by IP whitelist. I can find ...
0
votes
1answer
36 views

Deny all kind of access except for ip-range

Hi I'm setting up a little 2012R2 network. Right now I want to setup an DC and connect a few windows machines with it. It's running virtualisied on my root server and unfortunatly I can't put it ...
3
votes
1answer
420 views

Assign static IP by MAC address on openVPN

Our business is currently running a VPN using OpenVPN on a server we host ourselves. We have a need to lock down our internal network for client reasons - so the desired outcome is that only ...
0
votes
1answer
168 views

WS2012 RDP IP-whitelist not working

I'm running Windows Server 2012 with newest updates etc. We've at all times restricted our RDP with a whitelist with IP in the Scope properties of the "Remote Desktop - Usermode" rule inside the ...
1
vote
1answer
133 views

Using a whitelist too large for an AWS VPC Security Group

I have a large list of IPs I need to whitelist for a VPC instance. I've added as many ranges as possible to the security group until I ran out of available rules. I'm adding rules for HTTP and HTTPS ...
0
votes
0answers
45 views

Ansible whitelist directory contents?

In conf.d-style application configurations, it's useful (for security, auditing, and version control) to be able to say that "only the templates listed are present in the directory". There are a few ...
1
vote
1answer
239 views

How Does DNSWL work? How can I gain better trust? [closed]

How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust? Do some companies report "good" servers? Or will the score go up with time without reporting ...
0
votes
0answers
130 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
0
votes
0answers
175 views

Pulling docker images from behind whitelisted proxy

I'm attempting to deploy my application using docker on a corporate AWS instance that sits behind a http proxy. I have installed docker and whitelisted the base image pull address. However when I ...
1
vote
1answer
64 views

ip range whitelist error

I need to whitelist an ip range for our load testing with Loadimpact. They have given us an ip list with ranges listed as: 54.80.0.0/13 (54.80.0.0 – 54.87.255.255) ...
4
votes
1answer
518 views

How to blacklist or whitelist lots or few ip ranges with ipset and iptables + fail2ban

EDIT: It's astonishing how the urge to find a solution sometimes is sufficient to slowly but steadily lead one towards a solution. Also, the more often I reread my question in order to clarify it, I ...
-4
votes
1answer
40 views

Preventing operating systems from being installed on a server [closed]

Is it possible to blacklist certain operating systems from being installed on a server? Example scenarios: 1) There is an existing physical server, with no operating system. Is there a way to block ...
0
votes
1answer
3k views

Whitelist Elastic Load Balancer based on IP [closed]

I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS ...
0
votes
1answer
1k views

AWS Elastic Load Balancer : white list only my IP

My objective: To make my AWS Elastic Load Balancer hittable by only traffic from my ip. What I have tried: created a security group in EC2 security groups set an inbound rule that allows all ...
0
votes
2answers
2k views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
2
votes
1answer
993 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1 [closed]

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
1answer
119 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
377 views

How do I create a firewalld whitelist?

I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
1
vote
1answer
610 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy. So if HAProxy loads whitelists like this. acl whitelist src -f ...
-1
votes
1answer
268 views

nginx special directory whitelist extension

How can i set white list extension for special directory for my virtual host. I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
0
votes
1answer
767 views

How to setup intermediate SMTP mail server / relay to filter outgoing emails

I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it? Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
2
votes
1answer
3k views

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this ...
1
vote
1answer
337 views

Whitelist nginx proxy_pass $args

I have nginx configured to proxy requests : server { listen 80; server_name proxy.mydomain.com; location /proxy { resolver 8.8.8.8; proxy_pass $args/; } } So ...
0
votes
1answer
2k views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
1answer
2k views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
1k views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
-1
votes
1answer
262 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
1
vote
0answers
75 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
0answers
476 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
1
vote
1answer
875 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
550 views

Best way to whitelist 1e100.net?

I'm trying to block all http/s traffic and whitelist a very small handful of websites. iptables works well to whitelist simple websites. It falls apart on the asynchronous client-to-other ...
0
votes
1answer
964 views

IPFire: allow whitelist only within time constraint

I am trying to get example 2 on this page: http://www.squidguard.org/Doc/examples.html working thru the IPFire interface, with the addition that the rule is applied only during a time constraint ...
0
votes
1answer
1k views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
1
vote
0answers
376 views

DD-WRT/TOMATO Whitelist openVPN connection for specified client MAC/IP

I will use these settings: # Allow these TRUSTED hosts unrestricted access iptables -A wanout -i `nvram get lan_ifname` -m mac --mac-source <allowed MAC #1> -j ACCEPT iptables -A wanout -i ...
-1
votes
1answer
692 views

Any way to Improve performance of iptables DDOS whitelist? [closed]

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and ...
1
vote
1answer
2k views

Can't receive password-protected archives in Exchange 2007

First off, the relevant environmental information: I'm running Exchange 2007 behind a Barracuda Spam & Virus Firewall 300. Recently, I've started using a service that sends me a monthly report. ...