The tag has no wiki summary.

learn more… | top users | synonyms

-4
votes
1answer
34 views

Preventing operating systems from being installed on a server [closed]

Is it possible to blacklist certain operating systems from being installed on a server? Example scenarios: 1) There is an existing physical server, with no operating system. Is there a way to block ...
-1
votes
1answer
149 views

Whitelist Elastic Load Balancer based on IP [closed]

I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS ...
0
votes
1answer
199 views

AWS Elastic Load Balancer : white list only my IP

My objective: To make my AWS Elastic Load Balancer hittable by only traffic from my ip. What I have tried: created a security group in EC2 security groups set an inbound rule that allows all ...
0
votes
2answers
484 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
1
vote
1answer
257 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
1answer
52 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
130 views

How do I create a firewalld whitelist?

I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
1
vote
1answer
175 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of ip addresses that I want to use to help determine to right actions to take with HAProxy. So if haproxy loads whitelists like this. "acl whitelist src -f ...
-1
votes
1answer
146 views

nginx special directory whitelist extension

How can i set white list extension for special directory for my virtual host. I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
-1
votes
1answer
361 views

How to setup intermediate SMTP mail server / relay to filter outgoing emails

I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it? Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
1
vote
1answer
641 views

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this ...
0
votes
1answer
167 views

Whitelist nginx proxy_pass $args

I have nginx configured to proxy requests : server { listen 80; server_name proxy.mydomain.com; location /proxy { resolver 8.8.8.8; proxy_pass $args/; } } So ...
0
votes
0answers
294 views

mod_evasive blocking whitelisted ips?

I am running a trial stress test on my server with mod_evasive enabled and the loopback ip address whitelisted for the test as shown in the configuration below: DOSHashTableSize 3097 DOSPageCount ...
0
votes
1answer
806 views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
1answer
1k views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
709 views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
-1
votes
1answer
162 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
1
vote
0answers
60 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
0answers
191 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
1
vote
1answer
363 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
313 views

Best way to whitelist 1e100.net?

I'm trying to block all http/s traffic and whitelist a very small handful of websites. iptables works well to whitelist simple websites. It falls apart on the asynchronous client-to-other ...
0
votes
1answer
495 views

IPFire: allow whitelist only within time constraint

I am trying to get example 2 on this page: http://www.squidguard.org/Doc/examples.html working thru the IPFire interface, with the addition that the rule is applied only during a time constraint ...
0
votes
1answer
477 views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
1
vote
0answers
265 views

DD-WRT/TOMATO Whitelist openVPN connection for specified client MAC/IP

I will use these settings: # Allow these TRUSTED hosts unrestricted access iptables -A wanout -i `nvram get lan_ifname` -m mac --mac-source <allowed MAC #1> -j ACCEPT iptables -A wanout -i ...
-1
votes
1answer
544 views

Any way to Improve performance of iptables DDOS whitelist? [closed]

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and ...
1
vote
1answer
1k views

Can't receive password-protected archives in Exchange 2007

First off, the relevant environmental information: I'm running Exchange 2007 behind a Barracuda Spam & Virus Firewall 300. Recently, I've started using a service that sends me a monthly report. ...
2
votes
1answer
4k views

Open Windows Firewall to all connections from specific IP Address

Is it possible to "whitelist" an IP Address in the Windows Firewall and allow all connections from that specific address?
0
votes
1answer
427 views

DNS Whitelist Only [closed]

I want to set up a router to block the whole of the internet except for user-specified domains. Similar questions have been asked here (like this), but they're asked by people who are aiming to ...
2
votes
2answers
1k views

MySQL hosts cache: whitelist IP?

Is there a way to whitelist an IP address, so that max_connect_errors doesn't apply? The IP address for my office was blocked today due to too many connection errors to our new development MySQL ...
1
vote
1answer
1k views

How to white-list specific PHP script process in CSF?

I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must ...
1
vote
1answer
67 views

Can I easily setup a relay on a unix server which only accepts connection on a single IP?

I have a situation where I've developed a website on Windows and come to find only a single UNIX server has been white listed for the back end server-to-server information exchange that needs to be ...
-1
votes
2answers
365 views

VPN To Provide A Static IP Address [closed]

We are developing on a server with a client whose network does not have a VPN and restricts access to the server by a whitelist IP list. Many of our team members do not have static IP addresses as ...
4
votes
1answer
183 views

Restrict WSGI based on IP

So I have trac running on my debian server with the VirtualHost file looking like: ... WSGIScriptAlias / /srv/domain/trac.wsgi WSGIScriptReloading On <Directory /srv/domain/tracprojects> ...
3
votes
2answers
1k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
0
votes
1answer
2k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
2
votes
1answer
561 views

How to whitelist CloudFlare IP ranges within iptables rules (multiport)?

There seem to be many different ways to setup whitelist rules within iptables. What is the wisest way to whitelist the CloudFlare IP address ranges below via SSH? 204.93.240.0/24 (204.93.240.0 - ...
3
votes
3answers
2k views

Postfix restrict recipients

how can I configure postfix to allow sending to a certain (external) domain only? I'm already using check_recipient_access. Content of my /etc/postfix/recipients_restrictions: domain.com OK My ...
4
votes
1answer
453 views

DNS Resolver White List and block all other domains

A customer asked us to put on a DNS Resolver for its network. What he requests is: A list of allowed domains (white list) that the dns resolver can answer (anche cache) Any other domains outside the ...
2
votes
2answers
464 views

Simple SMTP relay with whitelist

I've got a test instance of a compiled web app (that I didn't write) which I'd like to do some testing with, however the app contains client email addresses that I would like to not receive emails ...
5
votes
1answer
3k views

How to configure postfix to only send to whitelisted addresses?

I want to configure postfix to only send mail to addresses in a whitelist. I have tried to use smtpd_recipient_restrictions in main.cf like so: smtpd_recipient_restrictions = ...
0
votes
1answer
415 views

Is whitelisting a CNAME enough?

We are working on setting up a list of domain names we need to have whitelisted for educational institutions who use our site. We are using AWS S3 as well as cloudfront. In our cloud front, we ...
0
votes
2answers
705 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
1answer
931 views

postfix global white/blacklist defined by pair

I have defined global whitelist in postfix using MYSQL with the following options: smtpd_recipient_restrictions = reject_invalid_hostname, check_client_access ...
2
votes
1answer
312 views

BIND Whitelist Config

Im trying to setup a 'whitelist' DNS server for a small school network to prevent the kids accessing inappropriate sites (ie. students should only be able to access a pre-selected list of sites) and ...
3
votes
1answer
298 views

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ...
2
votes
5answers
849 views

Limit Internet access to White-Listed Sites?

We have need for certain computers to have their Internet access limited to a list of sites, denying access to all others (white-listing). Some of these sites use HTTPS, so the solution needs to ...
1
vote
1answer
550 views

Qmail SMTP Whitelist & SMTP Authentication?

How can I get qmail to work with both an smtp whitelist and smtp authentication? If my IP is whitelisted, SMTP authentication does not seem to work (error: "the server does not support SMTP password ...
0
votes
1answer
879 views

Postfix: combine check_client_access and check_sender_access for Relayaccess

We have a mailserver running on Postfix. Only authenticated users are allowed to send emails. One client has a multifunction printer, which is configured to send scanned documents to an email ...
5
votes
3answers
547 views

What is the best way to setup a mail server in this day and age? [closed]

I am setting up a fresh brand new mail server and I want to get it whitelisted across all mail companies, aol, yahoo, hotmail, gmail, etc. There are options like mailgun.net which I would consider ...
1
vote
2answers
125 views

Is an email whitelist tied to a domain name, or an IP address?

If I move my email server to a different server, and consequently a different IP address, but keep the same domain name, do I lose the work I've done to get whitelisted?