Questions tagged [deny]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
32 views

Nginx + jirafeau - deny acces to admin.php

Hello i try to deny access for externe IP to my URL admin.php of my website with nginx. I have a jirafeau server with a example.com/admin.php I try to deny acces for this page but dont work. I am new ...
user avatar
1 vote
1 answer
151 views

IIS stop bogus API

In IIS can it stop bogus API calls? Yesterday I got flooded with something that was trying to see if a page is on the site. They got the 404 but the application still had to check to see if that was a ...
user avatar
0 votes
0 answers
649 views

HaProxy deny http-request unless header contains specific string

I’m trying to add a configuration in my Hap conf for a client, who is using a special header. What I would like to do is to deny http requests if this header Is present and if the query do not contain ...
user avatar
1 vote
1 answer
57 views

Different methods of denying access in httaccess

I want to deny the access to all files and subdirectories in a given folder via .htaccess. I found this two methods: deny from all <Files "*"> Order Deny,Allow Deny from all &...
user avatar
  • 129
1 vote
2 answers
6k views

How to Block X forwarded-for IP in nginx

My website is running behind aws Load Balancer. Now if i try to deny any IP to access my website by using "deny 59.92.130.106" under location / nothing happened. That IP still getting 200 ...
user avatar
  • 49
1 vote
1 answer
121 views

How to prevent other people from proxy_pass their own domains to my domain?

People can use Nginx to proxy_pass to my domain and on the browser, the contents are mines, but on address bar it's their domains. How to detect when the requests are thru' proxy_pass and deny those? ...
user avatar
  • 125
1 vote
1 answer
252 views

Drop packets with iptables for ssh login by user root

Is it possible to have iptables DROP any packets with user "root" so that the SSH daemon doesn't even have to waste cycles denying the login attempt? I already deny root login attempts in my ...
user avatar
  • 131
3 votes
1 answer
4k views

Hashicorp Vault - Policy restricting one specific sub node in a path

I have a Hashicorp Vault server configured and everything is running great, except for my "deny" policies. I have a 2 level grouping for the majority of secrets, so they follow the structure of: ...
user avatar
1 vote
1 answer
266 views

Lock access to error_log from url

I have a website on WordPress. Versions: WordPress 3.3.1 PHP 7.2.13 Apache 2.4.37 My problem is that, error_log file is exposed to be viewed from url. For example: www.example.com/wp-content/...
user avatar
  • 11
0 votes
0 answers
15 views

How can I forbid my email client (Mail iOS) to send email to a specific email address

What I mean! Iam in conflict about business or speak about a matter with someone. Instead of sending the message to the person I speak, I send the message to the person/company that I talk about! ...
user avatar
3 votes
1 answer
5k views

NginX - allow - custom error page

This is rather interesting Guys! I have the following code in one of my webapplications NginX configuration: location /login { #access_log off; proxy_pass https://public; ...
user avatar
  • 984
1 vote
0 answers
237 views

why selinux is denying file access(ls /usr/bin) to container_file_t type inside my container

I have one RHEL7.4 node, that when enforing selinux, it will fail my container, I checked and found it is denying reading in the container internal directories: # docker run -it 172.16.1.120:5000/...
user avatar
2 votes
0 answers
268 views

Disable FTP commands on a per-user basis

I'm in the process of configuring an FTP server, using vsftp. I wish to have a couple different users. Some of these should only be able to read files, others should only be able to put files and some ...
user avatar
0 votes
1 answer
38 views

Redirecting denied connections to ports 80, 443 to other IP that hosts an error page

Okay, here we go.. I am using UFW on my Debian 8 server to block all incoming connections on ports 80 and 443, except for those that I have allowed. However, I need to redirect those dropped ...
user avatar
  • 11
0 votes
1 answer
86 views

Deny access to change file extension in shared folder?

Is it possible to deny users from changing files extensions in a shared folder? I'm asking that to try and avoid ransomware infection. I will deny people from changing file extensions inside the ...
user avatar
  • 321
1 vote
1 answer
393 views

Deny exim4 to receive all emails

I have a fresh exim4 install without any tweaks on a Debian 8.6 machine. I use it to send emails from PHP: ; /etc/php5/fpm/conf.d/mail.ini [mail function] sendmail_path = /usr/sbin/exim4 -t mail....
user avatar
0 votes
0 answers
50 views

Value in only allowing access to backend from specifc IPs

I have a Load Balancer in front of several nginx web servers. I want to lock down my web servers as much as possible so I've added this to the http block in my nginx.conf: allow {...
user avatar
  • 217
5 votes
2 answers
5k views

nginx deny ip - access forbidden by rule in error log

We having blocked some bad bots which relentlessly try to access our site via "Deny" directives in NGINX. It's not possible for us to block it at the firewall, as we use a load balancer that we have ...
user avatar
1 vote
0 answers
722 views

Can I deny in nginx based by URI and IP?

Basically I have an wordpress site (with a ecommerce store and a social login). I have denied all access to wp-login.php based on ip address. The problem is that social login uses this wp-login file. ...
user avatar
  • 11
0 votes
1 answer
445 views

SELinux preventing Asterisk from connecting to IMAP server for voicemail

I am running Asterisk on Fedora 23 and am using the voicemail IMAP module to store voicemails to Gmail. When SELinux is in enforcing mode it prevents Asterisk from connecting to Gmail. Here is the ...
user avatar
2 votes
3 answers
219 views

Debian - how to prevent global read access for all files?

In my debian all files, even the system ones have permissions rw-r--r--, so it means that all users can view ANY file even some system configuration or database files and so on. How do I prevent ...
user avatar
  • 29
0 votes
1 answer
1k views

NGinx Block all Wordpress Files except wp-login and wp-admin

How can I deny all; access to all front-facing wordpress files, except wp-login.php and wp-admin? What I currently have blocks access to all wp-* including the wp-admin location ~ ^/(index\.php|wp-.*...
user avatar
  • 133
1 vote
1 answer
350 views

order allow,deny blocks whole site

I can't get file blocking working. If I use the following statement in .htaccess, it blocks my whole site: order allow,deny <Files ~ ".*\.(js|JS|css|CSS|jpg|JPG|gif|GIF|png|PNG|mp4|MP4)$"> ...
user avatar
0 votes
1 answer
2k views

nginx: [warn] low address bits

So yeah, i got a list of blocked ip-ranges, and some of them gives me an error in gninx when i try to restart nginx. nginx: [warn] low address bits of 79.8.0.0/12 are meaningless in /etc/nginx/...
user avatar
  • 1
1 vote
2 answers
189 views

MySQL is denying access to a legitimate remote user

I have created a user and given that user full access, but MySQL is still denying access to that user - why? Create user: create user 'myUser'@'Mikes-MacBook-Air.local' identified by '...
user avatar
0 votes
1 answer
461 views

Mail send by server gets denied by mx.hotmail.com [duplicate]

I got an notice that some clients werent receiving their emails, all clients used hotmail accounts, while i looked into logs i got this part Sep 25 07:52:51 s22090 named[25045]: client 127.0.0.1#...
user avatar
  • 123
-1 votes
1 answer
7k views

Nginx allow/deny not working (403 Forbidden)

I am attempting to set some allow/deny directives within nginx for a few subfolders on my server. I am modifying the /etc/nginx/sites/enabled/default file, which is listed below: server { listen ...
user avatar
3 votes
1 answer
354 views

htaccess deny form all wp-login.php blocks "most" adresses but not all

One of my sites has been hacked recently. To make it short, i had an old version of wisiya newsletters running wich was used to upload a few files in the wp-content directory. Since then a lot of ...
user avatar
0 votes
1 answer
575 views

APF Limit to Deny IPs?

So, I've been actively banning IPs of malicious users. Previously, I only used IPtables to do this, but since giving APF a whirl, I've been having issues. It appears that there is a limit to the ...
user avatar
  • 141
2 votes
1 answer
9k views

How to deny requests in nginx when there is no referer?

In nginx access.log I see many lines like: 1.2.3.4 - - [19/Oct/2014:22:48:11 -0400] "POST /someurl/suburl HTTP/1.1" 200 19967 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.11) Gecko/...
user avatar
  • 203
1 vote
1 answer
1k views

How can I deny access to a folder in OpenLiteSpeed similarly to the way Apache does it?

I'm trying to deny access to a folder for a website that is hosted with OpenLiteSpeed v1.4.2, but I'm have trouble. I take it that .htaccess isn't supported in OpenLiteSpeed so I am unable to just put ...
user avatar
  • 566
0 votes
1 answer
3k views

Nginx deny IP's and setting custom 403 downloads a file?

I've attached my Nginx conf file for my default site which runs on Ubuntu. What I'm trying to achieve is the following: Main directory is /usr/share/nginx/www with the default file index.php ...
user avatar
  • 123
0 votes
1 answer
203 views

Global denial of certain file(s) on Apache

I run a webserver under Apache with several virtual hosts. I would like to prohobit the access to certain file names, but instead of using a deny rule on each vh I would like to know if I can achieve ...
user avatar
0 votes
1 answer
3k views

httpd (WordPress) gets avc denied write (SELinux)

I'm getting following message in my /var/log/audit/audit.log: type=AVC msg=audit(1402615093.053:68): avc: denied { write } for pid=799 comm="httpd" name="php" dev="xvda1" ino=8667365 scontext=...
user avatar
  • 12.2k
-4 votes
1 answer
898 views

Can I deny a user the ability to disable the microphone in Windows 7?

I'm looking for an option to deny a user the ability disable microphone on a laptop running Windows 7. I've tried to set DENY permission on the microphone setting in the registry, but it doesn't work....
user avatar
  • 321
1 vote
1 answer
2k views

Can Apache dynamically deny? [duplicate]

I host three different websites on the same server. Here's excerpts from this morning's Apache logs: ### SITE 1 ### [Fri Dec 13 09:15:49 2013] [error] [client 85.17.87.36] script not found or unable ...
user avatar
1 vote
1 answer
259 views

squid as parent of url filtering

I have this situation: client -> url-filtering -> squid -> internet The squid proxy sees all clients as a single IP ( of url filtering) so I have a lot of connections from a single IP. Squid is the ...
user avatar
  • 11
1 vote
1 answer
12k views

nginx deny directory and files to be downloaded

gurus. I have a problem and i dont know how to solve it. I am working with Git and Compass/SASS on some projects. Now i want to protect those directories. When i go only to the folder its all fine – i ...
user avatar
-1 votes
2 answers
1k views

Nginx deny doesn't work for folder files

I'm trying to restrict access to my site to allow only specific IPs and I've got the following problem: when I access www.example.com deny works perfectly, but when I try to access www.example.com/...
user avatar
1 vote
2 answers
4k views

Apache httpd: How can I Deny from all, Allow from specifc IP addresses

Can someone take a look at the syntax of the code below and let me know if it is correct -- my intention is to exclude the htaccess for the IP ranges specified in the 'Allow' part and rest of all ...
user avatar
0 votes
1 answer
2k views

hosts.deny line too long or too big file?

I have about 50k ip addresses denied in the hosts.deny file, generated by a script with 7 addresses per line max and get this error: warning: /etc/hosts.deny, line 4429: missing newline or line too ...
user avatar
  • 1,429
1 vote
1 answer
589 views

What is the easiest way of adding a list of AWS IP addresses to IIS 7.5 disallow list?

So far, I have been manually adding C-class IP address ranges to the IIS disallow list, ie; 101.22.32.0 / 255.255.255.0. I would essentially like to add all the AWS IP address ranges found here: EC2 ...
user avatar
  • 269
3 votes
3 answers
12k views

nginx not blocking user agents

I have this in my .conf file for my website in attempt to block 2 user agents from constantly probing my server. ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* "...
user avatar
3 votes
2 answers
8k views

nginx deny user agent causes error when not encapsulated in quotes

I'm trying to deny some user agents I constantly see probing my nginx web server. If I have this in my .conf file ## Block http user agent - morpheus fucking scanner ## if ($http_user_agent ~* ...
user avatar
0 votes
1 answer
6k views

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been ...
user avatar
  • 456
13 votes
5 answers
24k views

Deny IP address on AWS ELB

I've, more or less, following configuration on AWS: Elastic load balancer with 3 machines o 3 different availability zones. My security group allows 0.0.0.0/0:80 as it's my rails application (nginx, ...
user avatar
  • 1,110
1 vote
1 answer
3k views

Reject Nginx request with no authentication in general

Is it possible to reject all nginx request, which don't send basic authentication data with them? I have requests like this: xxx.xxx.xxx.xxx - - [24/Oct/2012:10:32:12 +0200] "POST /path HTTP/1.1" ...
user avatar
  • 276
4 votes
5 answers
4k views

NTFS: Deny all permissions for all files, except where explicitly added

I'm running a sandboxed application as a local user. I now want to deny almost all file system permissions for this user to secure the system, except for a few working folders and some system DLLs (I'...
user avatar
  • 151
3 votes
1 answer
3k views

IIS 7 - Enabling deny url sequences with backslash

I've been trying to restrict backslashes \ in URL's via the Request filtering tool in IIS 7 by using: <configuration> <system.webServer> <security> <...
user avatar
  • 131
5 votes
2 answers
10k views

Blocking a network device from communicating with another device on the LAN

I have been working with the firewall/router distribution Pfsense for a while now and I have been trying to figure out how to "isolate" a server on my LAN from other computers on my LAN by using deny/...
user avatar
  • 253