The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
44 views

How to use pfSense as a firewall in order to assign url whitelists to IP groups

In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
1
vote
1answer
50 views

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

Background info : cPanel server with atomicorp ruleset, plus our own custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR ...
0
votes
1answer
24 views

How to route an IP Whitelist to one VM and all other to a second VM on proxmox?

Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
0
votes
0answers
53 views

How do I create a firewalld whitelist?

I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
0
votes
1answer
63 views

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of ip addresses that I want to use to help determine to right actions to take with HAProxy. So if haproxy loads whitelists like this. "acl whitelist src -f ...
-1
votes
1answer
60 views

nginx special directory whitelist extension

How can i set white list extension for special directory for my virtual host. I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
-1
votes
1answer
216 views

How to setup intermediate SMTP mail server / relay to filter outgoing emails

I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it? Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
1
vote
1answer
238 views

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this ...
0
votes
1answer
123 views

Whitelist nginx proxy_pass $args

I have nginx configured to proxy requests : server { listen 80; server_name proxy.mydomain.com; location /proxy { resolver 8.8.8.8; proxy_pass $args/; } } So ...
0
votes
0answers
230 views

mod_evasive blocking whitelisted ips?

I am running a trial stress test on my server with mod_evasive enabled and the loopback ip address whitelisted for the test as shown in the configuration below: DOSHashTableSize 3097 DOSPageCount ...
0
votes
1answer
496 views

how to whitelist or deny “enable” mode IP address to cisco 3750 switch

I have a Cisco 3750 switch and I want to modify the allow/deny IP addresses that can access it in ssh and "enable" mode. Not sure how, and googling is nearly impossible to get this info it seems.
0
votes
1answer
475 views

Block all public IP addresses except those whitelisted

We have a 2008 R2 server hosted in a data centre where we have no physical access but connect to it using RDP. We plan to run SQL Server and some other services which should only be accessible to a ...
1
vote
1answer
459 views

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH ...
-1
votes
1answer
140 views

Blacklist and whitelist of domains on Debian Linux router

I have to create blacklist and whitelist in small office for two groups of employees. I divided the users into two group: First group has block all webpages except about 80 domains which i want to ...
1
vote
0answers
52 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
0
votes
0answers
128 views

how to whitelist ip, port, protocol and app on a router?

I am looking for the simplest but robust solution to allow user accounts under Windows Server 2012 to use GitHub.com with the GitHub app, but otherwise not a peep is allowed from the server to reach ...
1
vote
1answer
271 views

Whitelisting valid URL patterns on a NGINX webserver

I want to whitelist only valid URL-patterns on our RESTful webserver / API, using regexs or something. But when googling for some examples I get a little bit suspicious since there is not much ...
0
votes
1answer
248 views

Best way to whitelist 1e100.net?

I'm trying to block all http/s traffic and whitelist a very small handful of websites. iptables works well to whitelist simple websites. It falls apart on the asynchronous client-to-other ...
0
votes
1answer
321 views

IPFire: allow whitelist only within time constraint

I am trying to get example 2 on this page: http://www.squidguard.org/Doc/examples.html working thru the IPFire interface, with the addition that the rule is applied only during a time constraint ...
0
votes
1answer
367 views

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. ...
1
vote
0answers
199 views

DD-WRT/TOMATO Whitelist openVPN connection for specified client MAC/IP

I will use these settings: # Allow these TRUSTED hosts unrestricted access iptables -A wanout -i `nvram get lan_ifname` -m mac --mac-source <allowed MAC #1> -j ACCEPT iptables -A wanout -i ...
-1
votes
1answer
468 views

Any way to Improve performance of iptables DDOS whitelist? [closed]

I'm having a problem stopping a DDOS attack on a dedicated server. I have tried a lot of things (mod_evasive, apf, ddos deflate, bfd...). The attack is very big and from a lot of differents IPs, and ...
0
votes
0answers
137 views

How to send a test e-mail from an RBL blocked host?

In order to test a whitelisted DNS entry: How can I send an e-mail from a blocked (in RBL) host, is there such a test service even exists?
1
vote
1answer
814 views

Can't receive password-protected archives in Exchange 2007

First off, the relevant environmental information: I'm running Exchange 2007 behind a Barracuda Spam & Virus Firewall 300. Recently, I've started using a service that sends me a monthly report. ...
2
votes
1answer
3k views

Open Windows Firewall to all connections from specific IP Address

Is it possible to "whitelist" an IP Address in the Windows Firewall and allow all connections from that specific address?
0
votes
1answer
352 views

DNS Whitelist Only [closed]

I want to set up a router to block the whole of the internet except for user-specified domains. Similar questions have been asked here (like this), but they're asked by people who are aiming to ...
2
votes
2answers
944 views

MySQL hosts cache: whitelist IP?

Is there a way to whitelist an IP address, so that max_connect_errors doesn't apply? The IP address for my office was blocked today due to too many connection errors to our new development MySQL ...
1
vote
1answer
717 views

How to white-list specific PHP script process in CSF?

I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must ...
1
vote
1answer
67 views

Can I easily setup a relay on a unix server which only accepts connection on a single IP?

I have a situation where I've developed a website on Windows and come to find only a single UNIX server has been white listed for the back end server-to-server information exchange that needs to be ...
-1
votes
2answers
321 views

VPN To Provide A Static IP Address [closed]

We are developing on a server with a client whose network does not have a VPN and restricts access to the server by a whitelist IP list. Many of our team members do not have static IP addresses as ...
4
votes
1answer
155 views

Restrict WSGI based on IP

So I have trac running on my debian server with the VirtualHost file looking like: ... WSGIScriptAlias / /srv/domain/trac.wsgi WSGIScriptReloading On <Directory /srv/domain/tracprojects> ...
3
votes
2answers
1k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
0
votes
1answer
1k views

How to whitelist external access to an internal webserver via Cisco ACLs?

This is our company's internet gateway router. This is what I want to accomplish on our Cisco 2691 router: All employees need to be able to have unrestricted access to the internet (I've blocked ...
2
votes
1answer
482 views

How to whitelist CloudFlare IP ranges within iptables rules (multiport)?

There seem to be many different ways to setup whitelist rules within iptables. What is the wisest way to whitelist the CloudFlare IP address ranges below via SSH? 204.93.240.0/24 (204.93.240.0 - ...
3
votes
3answers
1k views

Postfix restrict recipients

how can I configure postfix to allow sending to a certain (external) domain only? I'm already using check_recipient_access. Content of my /etc/postfix/recipients_restrictions: domain.com OK My ...
4
votes
1answer
367 views

DNS Resolver White List and block all other domains

A customer asked us to put on a DNS Resolver for its network. What he requests is: A list of allowed domains (white list) that the dns resolver can answer (anche cache) Any other domains outside the ...
2
votes
2answers
388 views

Simple SMTP relay with whitelist

I've got a test instance of a compiled web app (that I didn't write) which I'd like to do some testing with, however the app contains client email addresses that I would like to not receive emails ...
5
votes
1answer
2k views

How to configure postfix to only send to whitelisted addresses?

I want to configure postfix to only send mail to addresses in a whitelist. I have tried to use smtpd_recipient_restrictions in main.cf like so: smtpd_recipient_restrictions = ...
1
vote
0answers
277 views

How to reject incoming mail, except when sender is on a whitelist (Exim)

I have a cPanel VPS with multiple hosted domains. For only a couple of these domains, I would like to set up a special whitelist-only scenario. Furthermore, I need this to apply to only one user on ...
0
votes
1answer
337 views

Is whitelisting a CNAME enough?

We are working on setting up a list of domain names we need to have whitelisted for educational institutions who use our site. We are using AWS S3 as well as cloudfront. In our cloud front, we ...
0
votes
2answers
559 views

vsftpd whitelisting

How do you whitelist IPs for the service to allow only certain subnets on? Do I use IPTables or is there an easier way like IPWrappers Do you have to register the service for it to work with ...
0
votes
1answer
836 views

postfix global white/blacklist defined by pair

I have defined global whitelist in postfix using MYSQL with the following options: smtpd_recipient_restrictions = reject_invalid_hostname, check_client_access ...
2
votes
1answer
283 views

BIND Whitelist Config

Im trying to setup a 'whitelist' DNS server for a small school network to prevent the kids accessing inappropriate sites (ie. students should only be able to access a pre-selected list of sites) and ...
3
votes
1answer
294 views

Iptables list doesn't persist across restarts

I am trying to white list CloudFlare's IP addresses on my server by issuing these: iptables -N whitelist iptables -A whitelist -s 204.93.177.0/24 -j ACCEPT iptables -A whitelist -s 199.27.128.0/21 -j ...
2
votes
5answers
736 views

Limit Internet access to White-Listed Sites?

We have need for certain computers to have their Internet access limited to a list of sites, denying access to all others (white-listing). Some of these sites use HTTPS, so the solution needs to ...
1
vote
1answer
515 views

Qmail SMTP Whitelist & SMTP Authentication?

How can I get qmail to work with both an smtp whitelist and smtp authentication? If my IP is whitelisted, SMTP authentication does not seem to work (error: "the server does not support SMTP password ...
0
votes
1answer
774 views

Postfix: combine check_client_access and check_sender_access for Relayaccess

We have a mailserver running on Postfix. Only authenticated users are allowed to send emails. One client has a multifunction printer, which is configured to send scanned documents to an email ...
5
votes
3answers
530 views

What is the best way to setup a mail server in this day and age? [closed]

I am setting up a fresh brand new mail server and I want to get it whitelisted across all mail companies, aol, yahoo, hotmail, gmail, etc. There are options like mailgun.net which I would consider ...
1
vote
2answers
122 views

Is an email whitelist tied to a domain name, or an IP address?

If I move my email server to a different server, and consequently a different IP address, but keep the same domain name, do I lose the work I've done to get whitelisted?
1
vote
3answers
691 views

Squid with whitelist and redirect

I managed to setup Squid3 on a Debian Squeeze 6.0 server in trasparent mode with iptables nat redirection. All requests on port 80 are correctly redirected to squid and then compared with a whitelist ...