The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
11 views

Modsecurity Whitelist and keep logging

I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time. SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" ...
0
votes
1answer
17 views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
0answers
16 views

Modsecurity: How can I consolidate all SecRules to ignore aparameter

How can I consolidate all or any secrule to ignore a parameter with modsecurity? I have a form that will always flag as XSS, unfortunately, my rule list is getting rather large as the site grows. I ...
1
vote
1answer
38 views

Protecting a location by IP while applying basic auth everywhere else

I want to achieve the following results: Apply basic authentication to ANY location, file, path Remove basic authentication for an IP/CIDR range whitelist Prevent ALL access to a specific directory, ...
1
vote
1answer
27 views

How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?

I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
3
votes
2answers
46 views

EC2 Security Group, restrict inbound access by hostname

I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point. In the EC2 security group console I can only ...
0
votes
0answers
19 views

postfix whitelist all incoming mail with a specific domain destination

Would it be possible to whitelist all incoming mails with a specific recipient domain. I have multiple domains running on my mailserver. I want to simply push thru all the incoming mails with a ...
0
votes
2answers
45 views

Locking down Azure Portal

My company does not want any staff to have access to our corporate Azure account from outside of our offices. So, is it possible to lock down the Azure Portal? Preferably by IP whitelist. I can find ...
0
votes
1answer
32 views

Deny all kind of access except for ip-range

Hi I'm setting up a little 2012R2 network. Right now I want to setup an DC and connect a few windows machines with it. It's running virtualisied on my root server and unfortunatly I can't put it ...
2
votes
1answer
212 views

Assign static IP by MAC address on openVPN

Our business is currently running a VPN using OpenVPN on a server we host ourselves. We have a need to lock down our internal network for client reasons - so the desired outcome is that only ...
0
votes
1answer
104 views

WS2012 RDP IP-whitelist not working

I'm running Windows Server 2012 with newest updates etc. We've at all times restricted our RDP with a whitelist with IP in the Scope properties of the "Remote Desktop - Usermode" rule inside the ...
1
vote
1answer
95 views

Using a whitelist too large for an AWS VPC Security Group

I have a large list of IPs I need to whitelist for a VPC instance. I've added as many ranges as possible to the security group until I ran out of available rules. I'm adding rules for HTTP and HTTPS ...
0
votes
0answers
35 views

Ansible whitelist directory contents?

In conf.d-style application configurations, it's useful (for security, auditing, and version control) to be able to say that "only the templates listed are present in the directory". There are a few ...
1
vote
1answer
131 views

How Does DNSWL work? How can I gain better trust? [closed]

How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust? Do some companies report "good" servers? Or will the score go up with time without reporting ...
0
votes
0answers
98 views

Simple IPtables Script for Whitelisting (Amazon Endpoints)

I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
0
votes
0answers
147 views

Pulling docker images from behind whitelisted proxy

I'm attempting to deploy my application using docker on a corporate AWS instance that sits behind a http proxy. I have installed docker and whitelisted the base image pull address. However when I ...
1
vote
1answer
56 views

ip range whitelist error

I need to whitelist an ip range for our load testing with Loadimpact. They have given us an ip list with ranges listed as: 54.80.0.0/13 (54.80.0.0 – 54.87.255.255) ...
4
votes
1answer
416 views

How to blacklist or whitelist lots or few ip ranges with ipset and iptables + fail2ban

EDIT: It's astonishing how the urge to find a solution sometimes is sufficient to slowly but steadily lead one towards a solution. Also, the more often I reread my question in order to clarify it, I ...
-4
votes
1answer
40 views

Preventing operating systems from being installed on a server [closed]

Is it possible to blacklist certain operating systems from being installed on a server? Example scenarios: 1) There is an existing physical server, with no operating system. Is there a way to block ...
0
votes
1answer
2k views

Whitelist Elastic Load Balancer based on IP [closed]

I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS ...
0
votes
1answer
888 views

AWS Elastic Load Balancer : white list only my IP

My objective: To make my AWS Elastic Load Balancer hittable by only traffic from my ip. What I have tried: created a security group in EC2 security groups set an inbound rule that allows all ...
0
votes
2answers
2k views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
2
votes
1answer
833 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
1answer
102 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
330 views

How do I create a firewalld whitelist?

I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
1
vote
1answer
520 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy. So if HAProxy loads whitelists like this. acl whitelist src -f ...
-1
votes
1answer
241 views

nginx special directory whitelist extension

How can i set white list extension for special directory for my virtual host. I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
0
votes
1answer
682 views

How to setup intermediate SMTP mail server / relay to filter outgoing emails

I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it? Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
2
votes
1answer
2k views

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this ...
1
vote
1answer
311 views

Whitelist nginx proxy_pass $args

I have nginx configured to proxy requests : server { listen 80; server_name proxy.mydomain.com; location /proxy { resolver 8.8.8.8; proxy_pass $args/; } } So ...
0
votes
1answer
2k views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
1answer
2k views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
1k views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
-1
votes
1answer
244 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
1
vote
0answers
73 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
0answers
397 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
1
vote
1answer
741 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
505 views

Best way to whitelist 1e100.net?

I'm trying to block all http/s traffic and whitelist a very small handful of websites. iptables works well to whitelist simple websites. It falls apart on the asynchronous client-to-other ...
0
votes
1answer
843 views

IPFire: allow whitelist only within time constraint

I am trying to get example 2 on this page: http://www.squidguard.org/Doc/examples.html working thru the IPFire interface, with the addition that the rule is applied only during a time constraint ...
0
votes
1answer
827 views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
1
vote
0answers
344 views

DD-WRT/TOMATO Whitelist openVPN connection for specified client MAC/IP

I will use these settings: # Allow these TRUSTED hosts unrestricted access iptables -A wanout -i `nvram get lan_ifname` -m mac --mac-source <allowed MAC #1> -j ACCEPT iptables -A wanout -i ...
-1
votes
1answer
657 views

Any way to Improve performance of iptables DDOS whitelist? [closed]

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and ...
1
vote
1answer
2k views

Can't receive password-protected archives in Exchange 2007

First off, the relevant environmental information: I'm running Exchange 2007 behind a Barracuda Spam & Virus Firewall 300. Recently, I've started using a service that sends me a monthly report. ...
2
votes
1answer
7k views

Open Windows Firewall to all connections from specific IP Address

Is it possible to "whitelist" an IP Address in the Windows Firewall and allow all connections from that specific address?
1
vote
1answer
702 views

DNS Whitelist Only [closed]

I want to set up a router to block the whole of the internet except for user-specified domains. Similar questions have been asked here (like this), but they're asked by people who are aiming to ...
3
votes
2answers
2k views

MySQL hosts cache: whitelist IP?

Is there a way to whitelist an IP address, so that max_connect_errors doesn't apply? The IP address for my office was blocked today due to too many connection errors to our new development MySQL ...
3
votes
1answer
2k views

How to white-list specific PHP script process in CSF?

I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must ...
1
vote
1answer
71 views

Can I easily setup a relay on a unix server which only accepts connection on a single IP?

I have a situation where I've developed a website on Windows and come to find only a single UNIX server has been white listed for the back end server-to-server information exchange that needs to be ...
-1
votes
2answers
565 views

VPN To Provide A Static IP Address [closed]

We are developing on a server with a client whose network does not have a VPN and restricts access to the server by a whitelist IP list. Many of our team members do not have static IP addresses as ...
4
votes
1answer
244 views

Restrict WSGI based on IP

So I have trac running on my debian server with the VirtualHost file looking like: ... WSGIScriptAlias / /srv/domain/trac.wsgi WSGIScriptReloading On <Directory /srv/domain/tracprojects> ...