Questions tagged [access-control-list]

An access-list is a list of rules, usually held on network devices such as switches, routers or firewalls, that matches network traffic. The specific term 'access-list' is used in the context of Cisco devices, although the concept of an 'access list' is more generic.

Filter by
Sorted by
Tagged with
0
votes
0answers
50 views

OpenLDAP, writing ACL for specific use

I work with CentOS7 and I am configuring OpenLDAP base. I have root administrator (ldapadmin) who can make changes in the entire base (in all branches). I create branches for departments, that have to ...
2
votes
1answer
53 views

Restrict Viewer Access to Cloud Storage Objects via ACL

I'm hosting a static site in a Cloud Storage Bucket with fine-grained permissions set. I'm attempting to set by-object ACL permissions so users can only access specific resources if they have a ...
1
vote
0answers
34 views

Add NTFS Permission only to folders/files with inheritance disable

Our file servers have been around for years, and as such, the permissions have gotten a bit crazy. To start the clean-up effort, I would to make sure our "File Server Admins" group has Full ...
-1
votes
1answer
43 views

Give permissions of LDAP group files to specific user

Here is the situation: I want user usr to have the same permissions of a group grp, anywhere in the system. grp is not a local group, it comes from a LDAP server, of which I have no control over. I ...
2
votes
1answer
29 views

Exim: Accept suffix aliases as FROM address in ACL

I am using exim for outgoing mails. For SMTP authenticated users, I have already added several ACLs and want to add another one allowing suffix aliases. Suffix aliases are email addresses such as &...
0
votes
0answers
14 views

Cisco VPN client - How to block Odd numbered addresses with ACL (Extended ACL)?

So I am trying to configure a VPN client on cisco packet tracer but I am having some issues with configuring the ACL. In my task I am trying to create a VPN tunnel between R4 and R2. I am trying to ...
0
votes
0answers
6 views

Inheriting file permissions from directory for SQL user on Ubuntu

I have an application which uses a MSSQL server on Ubuntu and want to be able to copy my backup files to a Windows 10 machine. I'm very familiar with the Windows side, but much less familiar with ...
0
votes
0answers
10 views

TrueNAS premission probleem ACL

TrueNAS ACL premisson problem Hoi, im having some trouble lately with one share on my TrueNAS. the problem originated from removing a user via windows "Beveiliging" picture shown below ...
0
votes
0answers
8 views

Getting ACL permissions by user

I'm sharing files with other users. But other users are don't know who share files with himself. I mean how can I list ACL permissions by user? Can I do this? I am not talking about listing for a ...
0
votes
0answers
23 views

Force all files & subdirs that BY ANY MEANS come to be in/under a directory to inherit all permissions and group

I know this question may appear to be a duplicate, because many people have asked related questions about permission inheritance. However, none of the answers I've found address the full scope of what ...
0
votes
1answer
45 views

Azure private endpoints and ACL

I have this setup: a storage account a webapp a VNET with two subnets a private link The private link is in subnet A, and the webapp is delegated to subnet B. I have a the private link assigned to ...
0
votes
0answers
16 views

Setting Windows share permission to folder without updating subfolder permissions

I have a windows share (hosted on a QNAP NAS) with many files and folders in it. Imagine it like: \\nas\share \folderA \subfolder1 \subfolder2 \subfolder3 ... \...
0
votes
0answers
21 views

Working with HAPROXY MAPS as acl parameter

I have a file (EG token.map) where I have set key,value. Key is token and value is limit. Sample token.map :- 123A 10 456V 20 678M 30 Current acl line looks like :- acl exceeds_limit hdr_reg(token),...
0
votes
1answer
29 views

Restrict subnet access based on LDAP group

I've got 3 VLANs: Server, IT and Staff. The Staff VLAN has restricted access to the Server VLAN, while the IT VLAN has access to everything. When someone connects to the VPN I'd like to give them ...
1
vote
0answers
40 views

Why does Nginx's new files' permissions supersede my default ACL

I have issues setting up proper permission on cache directory on a site that run on Debian 10 with Nginx and php-fpm. I have an user 'myuser' which home is /var/www/mydomain.tld The strucure of the ...
0
votes
1answer
72 views

ACL not working with NAT

I'm studying on Cisco packet tracking, I just found one strange thing. I attached the network map and configuration below. 1> I created NAT for 10.2.0.0/16 and 10.3.0.0/16 to access the server0. 2&...
1
vote
0answers
91 views

How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?

ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree: icacls a_dir_root\ /save AclFile /T /C /Q Of course, groups are identified as SIDs. I want to restore ...
0
votes
1answer
95 views

How to setup primary DNS as OCI DNS and secondary DNS as EasyDNS?

I want to setup primary DNS as OCI DNS for a domain example.com. Want to setup it's secondary DNS in easyDNS. I found a documentation here to setup secondary DNS with easyDNS: https://kb.easydns.com/...
0
votes
1answer
72 views

setfacl on directory seems not working for default permissions on sub directories

As root, after creating a directory /Logs/case1, and setting the ACL to have default group "mygroup" permission as "rwx", any subdirectory created doesn't inherit those permissions ...
2
votes
2answers
741 views

what does the “ip” mean in ACLs?

I saw an ACLs command which is : deny ip 10.0.0.0 0.255.255.255 any I am confused does this "ip" mean ip address or the "TCP/IP" traffic ? Is this command mean it will drop any ...
0
votes
1answer
1k views

cisco router not nat to outside network

im trying to get PC access to outside network without any natting to outside network in router in stick config, problem is im unable to ping from outside network 10.130.1.0 to inside netwrok 10.1.10....
1
vote
0answers
65 views

Unix group-based access control with SVN over Apache

I have an SVN repository hosted over HTTPS wiht Apache 2. In an attempt to unify access control lists for SVN as well as other services on the server, and prevent having to deal with multiple copies ...
1
vote
1answer
30 views

Dynamically sharing file/folder between users on the same machine with subdirectory

I have 3000+ local users on my Linux system. I want to set permissions dynamically for folder or files. I came across ACLs (Access Control Lists) when I researched this topic. All users home location ...
0
votes
1answer
63 views

GUI Interface for ACL (Cisco)

Are there any interface (GUI) software to manage ACL? Using Cisco ACL, but it's hard to manage with command line. Any ideas? Basically, need a software tool to manage ACL permissions with GUI instead ...
0
votes
1answer
105 views

How do I make Haproxy error out if the instead of going to the next acl

I have the below configuration for haproxy frontend ft_ssl_vip bind *:443 # bind 10.0.0.10:443 mode tcp tcp-request inspect-delay 5s tcp-request content accept if { ...
1
vote
2answers
123 views

Why are Cisco access-lists bound to a specific interface?

This might seem like a simple/dumb question, but for me it is not. Please bear in mind, that I'm not a network administrator, so it's not obvious to me. Anyways, straight to the point: Why do I need ...
0
votes
1answer
33 views

KVM - My switch can manage ACLs, when I create bridged VMs (KVM), does the switch see them as “ports”?

My Cisco Switch has some nifty L3 features like ACLs I will have one of my physical hosts running KVM with multiple VMs. They are networked in bridged mode. I'm not overly familiar, but want to ...
0
votes
0answers
106 views

Group permissions on Linux directories with Systemd

Context Operating System: Debian 10 The context is the following: a Python web service needs to execute a Bash script via subprocess in a sub-directory, let's say /a/b/script.sh. A user, let's name it ...
0
votes
0answers
24 views

squid as forward proxy for specific users and destinations

We use a SQUID proxy as forward proxy to McAfee (Symantec). But in some scenarios the traffic should go directly on to the internet. I have the following challenge: In the current situation we have ###...
1
vote
1answer
156 views

NTFS permissions inheriting incorrectly as “this folder only”

I have a full directory tree that was migrated from another server. I've created top level folders with the necessary permissions that I wish to propagate to all descendant files and folders. However, ...
2
votes
1answer
57 views

specifying complex permissions on files and folder in unix

At work I manage a group responsible for data management and security. We have a need to specify complex permissions on files and folders beyond just the standard user/group/world rwx. Research shows ...
0
votes
0answers
13 views

pfsense haproxymodule limitation on the number of ACL or redirect rules

I am not an expert in pfsense, but our lead-engineer states a weird scenario where the max number of ACL he can configure in the pfsense is 100 while the rules limited to 256... I tried to get to the ...
0
votes
1answer
161 views

NACLs and NAT Gateways for public and private subnets

I have a VPC with 3 subnets: Public (FE layer, inbound internet access only) Protected (app layer, outbound internet access only) Private (DB layer, no internet access at all) The public subnet NACL ...
0
votes
0answers
157 views

Login to Windows 10 through OpenSSH Server As Regular User gives Administrator Privileges

I have installed OpenSSH server on a Windows 10 system and added my public key to the file at C:\Users\foo\.ssh\authorized_keys. However, when I log in to the Windows account using SSH and created a ...
0
votes
1answer
199 views

How can I set file permissions for new files in Maildir?

So I run debian 10 through VMbox on win10. I am setting up an email server right now and the things that won't let me turn in this quest is that I can't receive mail from the internet though I can ...
0
votes
0answers
29 views

Does a non-admin Windows user have ability to export private key from a key container in the RSA MachineKeys folder

If a non-admin Windows10 user has been granted ACL read permissions on the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder and has been granted read access to the key container using ...
0
votes
1answer
120 views

Create user that has SFTP access to everything under vhosts, using Plesk [closed]

I have a Centos 7 server running the latest version of Plesk. I want to create a user called all_sftp that has sftp only access to everything under /var/www/vhosts/ I've made the user, chrooted so ...
1
vote
0answers
50 views

Limit access on network share to a specific computer, Device claim under DAC not working

There are certain confidential data and we want to make sure that is does not get copied by user and eventually leaked out of organisation. For achieving the same, we have defined a restricted windows ...
0
votes
0answers
25 views

HAProxy errorfiles: Can I use php files? Or a remote location?

I'm currently migrating our nginx loadbalancer to haproxy and in nginx when we get the HTTP response codes of 500, 502, & 504, nginx points to a maintenance page that is written in php and on a ...
2
votes
1answer
125 views

Prevent user to overwrite files and directories

Help me to learn if this scenario is doable using Linux. I want to secure the access to a system path called "/mnt/data". System users retrictions: 'daemon_user': read/write access. 'read_user': ...
0
votes
0answers
51 views

S3 “folder-per-client” permissions strategy

I was originally planning on an S3 bucket per client, with bucket policies restricting access to that bucket to a single IP (the clients' single-tenant server). However, most S3 compatible service ...
1
vote
1answer
124 views

AWS WAFV2: ACL Rule for allowing access to specific URI Path

I have some web acl managed rules in AWS ELB that are blocking webhooks from Pusher api. They don't provide an IP list that I could include in a white list. I'm trying to create my own rule to allow ...
0
votes
0answers
209 views

Cisco ACL to block external DNS queries [RESOLVED]

One of the routers that I administer is getting bombarded with external DNS queries from the internet. This is a network border router which has a DNS server configured. There is an interface facing ...
2
votes
1answer
85 views

How to permit the chown use to a regular user, but only on its home directory?

I'm trying to allow regular user A to execute chown command to a list of user B,C,D having as object any files located into its home directory. In other words, I would try to limit the chown "root ...
0
votes
1answer
93 views

Cisco IOS ACL to permit inbound

I am struggling to get to grips with the ACL on the 2800 series cisco router. Briefly My topology is R1 > Sw1 > [Server 1, server 2, pc 1] R1 creates a PPPoE connection, that I'm using right now. ...
1
vote
2answers
5k views

Access to SMB shares denied after update to FreeNAS 11.3

My previous setup (FreeNAS 11.2) had working SMB shares with Windows 10. After an update to FreeNAS 11.3 SMB shares partially stopped working. I'd be more than thankful, if anyone could help me ...
0
votes
1answer
22 views

Horde webmail not recognizing Dovecot ACLs

I'm trying to set up one mailbox to be shared with another one using steps described here but for some reason I do not see that option in my mailbox (logged as an admin) even I have set ACL as a true ...
1
vote
1answer
86 views

Can't write on Samba4 share using Zentyal 6.1 server, after upgrading from 5, read only is allowed

I can't write on all my clients (Windows 7 and Windows 10) in all my samba shares, even if the users are accepted on domain, and the permissions was maintained. The shares are on a NAS, ISCSI ...
0
votes
0answers
209 views

HaProxy IP-based ACL not working

I've got an HaProxy front end (version 1.7.5-2) which works fine apart from it's not blocking access to specific IP addresses contained in the X-Forward-for header via an ACL. Other ACL's within it ...
1
vote
0answers
22 views

How do you configure access lists to restrict inbound ports while allowing all outbound traffic on a Cisco 2911 router with NAT?

First caveat: I did not design this network. Most of my recent networking experience is with ASAs; configuring NAT & ACLs there is pretty easy and straightforward. In this case, the engineer who ...

1
2 3 4 5
15