Questions tagged [restrictions]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
66 views

postfix restrict smtp sender based on ip address

I have a postfix server that I inherited many years ago. Originally it successfully controlled the sending of messages through authentication and IP addresses - if an authenticated user was sending ...
bithead's user avatar
0 votes
0 answers
138 views

Windows GPO Youtube restricted mode not applied in the browser on some machines

I have created a group policy to set youtube restricted mode in Edge and Chrome on a Windows server 2022 domain controller. On my test machine (W10 Pro ENG) the policies are applied and seem to work ...
Steve's user avatar
  • 1
0 votes
0 answers
91 views

Borg-Backup failed with Command in authorized_keys behind a ssh-tunnel?

I setup a PoC for a pull backup with Borg Backup. In this example a client can only reach the backup server behind a proxy server. In this case the server where Borg Backup is running open a temporary ...
Wiesel's user avatar
  • 13
0 votes
1 answer
265 views

Does postfix's check_recipient_access map allow for regex?

I am looking to update my postfix configuration so it restricts the domains to which emails can be sent. I am thinking of using smtpd_recipient_restrictions with check_recipient_access, based on this ...
Fulliautomatix's user avatar
0 votes
0 answers
36 views

Postfix Restrict Relay Domains Per User

I have a postfix server configured to relay for either mynetworks or sasl_authenticated clients. I would like to limit a sasl_autenticated client to send to a single domain. It looks like I might be ...
TurboAAA's user avatar
0 votes
0 answers
32 views

Restricting one site under Wordpress as Private in AWS ALB

I have configured multiple sites on WordPress and it is connected with internet-faced ALB under AWS. Is it possible to restrict one site as private on ALB? Remaining sites needs an public access. ...
Arunkumar NKL's user avatar
1 vote
1 answer
578 views

Restrict other Azure AD users from logging into Intune devices

I want to make sure that a user in our domain [email protected] does not login to a device that has been assigned to [email protected]. I have created a configuration profile but not sure what the ...
user3511199's user avatar
0 votes
1 answer
41 views

NGINX Conf Feedback Request: Limiting specific API endpoints to $remote_addr(s);

I was using this as a source of information to draw on: https://www.nginx.com/blog/deploying-nginx-plus-as-an-api-gateway-part-2-protecting-backend-services/#access-control My server is running a ...
Austin Foss's user avatar
0 votes
1 answer
144 views

What is the best practice for launching a web server as a restricted user?

In order to practice my Linux hardening skills, I am trying to launch a web server following certain security principles. My main goal would be to run the server using a dedicated user with very ...
paupaulaz's user avatar
1 vote
1 answer
133 views

Allow only selected address to connect to openssh

I need to restrict connections to an openssh server to only three or four IP addresses. I know I can, on the CentOS 7 and Oracle Linux boxes, use firewalld or TCP wrappers. However, some of the ...
scarville's user avatar
0 votes
1 answer
635 views

Allow reverse proxy access only from the host server

I have two servers A) frontend server (ip 11.22.33.44), B) backend server (ip 22.33.44.55). Both use Debian Linux and Apache server. A) frontend server uses reverse proxy to show content of B) backend ...
klor's user avatar
  • 344
0 votes
0 answers
68 views

Linux pam_time with groups [duplicate]

How do I allow /etc/security/time.conf to be able to restrict groups instead of users? It works flawlessly with users but not with groups. I need to have multiple groups in my case.
SAAD3000's user avatar
1 vote
1 answer
2k views

How does Apache mod_rewrite work to restrict by IP

I would like to accept only certain IP(s) for a few weeks. Only accepted IP could load this -> www.example.com/login not the others. Apache 2.2 is used. The code in mod_rewrite as below : ...
Katy's user avatar
  • 13
0 votes
1 answer
47 views

Cloudflare prohibits API GET request

I am having a trouble with my API's GET request. I settled cloudflare as a firewall for my web application. Behind it, my web application is working on Nginx server. All HTTP Requests are working for ...
Onur Göker's user avatar
0 votes
1 answer
85 views

How to restrict access on only one website (with virtualhost based configuration in httpd) ? I wont to be accessible only from a specific country

I wont to do it from the webserver, is it possible? Or the best practice is with access list's in the fouter, but then how other sites will be accessible from everywhere? The operating system is "...
aleksandar's user avatar
0 votes
1 answer
6k views

ACL conditional zone in Bind9

I'm trying to apply "restrictmoderate.youtube.com" only for kids and let the others access the standard "youtube.com", using Bind9. # cat named.conf include "/etc/bind/named.conf.options"; include "/...
Sebastien Damaye's user avatar
0 votes
1 answer
3k views

Nginx allow only specific API paths

I am very new to Nginx and I have below configuration in Nginx server { location /api { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://127.0.0.1:3000; ...
Mahesh G's user avatar
  • 101
0 votes
1 answer
341 views

Blocking Azure Web App externally breaks internal

I am trying to lock down an Azure website we have running to our intranet. I have browsed to App Services > Webappname > Networking > Access Restrictions but when I enter the two "allow" ...
Ash-G099's user avatar
0 votes
1 answer
2k views

Restricted SFTP-only access to a single directory using OpenSSH

I configured SFTP using open SSH by using following link on my Windows Server 2012 Installing SFTP (SSH FTP) Server on Windows Server 2012 R2 It is well configured and perfectly working fine. I have ...
Reply not's user avatar
  • 101
0 votes
1 answer
122 views

Can I limit Windows 7 or 10 VPN users access

I'm about to set up a simple network and i need to give some ppl remote access and am thinking about setting up windows VPN for that. Imagine I have 10 routers on this network and I need to give some ...
amirizadi's user avatar
2 votes
0 answers
225 views

IIS 7 IP and Domain Restrictions not working (set to deny by default)

I have a website on IIS and I am trying to block access to one particular folder from anywhere but our LAN. To experiment, I have added both an explicit deny rule for one particular machine on the ...
Darren's user avatar
  • 331
1 vote
0 answers
115 views

How to restrict or hide users to specific drives only (not typical drives combinations)

How can I restrict users (not admins) to access to specific drives? I know there is gp that allows to restrict typical combinations of drives, like C, A, B, D etc... But I would like to allow all ...
Raul Taboraz's user avatar
1 vote
0 answers
129 views

Can I limit users to VDI

I have a task to enable users to only access VDI(horizon view) when they login to their laptop or desktop. This should restrict then from any other actions than accessing the view application. ...
Pasha's user avatar
  • 243
0 votes
2 answers
93 views

Amazon web service visibility restriction to instances under same account [duplicate]

I'm looking for a possible idea to restrict the visibility ec2 instances to certain IAM users under the same root account. custom policies doesn't seem to work because describeInstances doesn't ...
Maggy's user avatar
  • 1
0 votes
1 answer
2k views

Postfix restrict incoming emails on a specific adress to adress of the same domain

My SMTP server is being abused because external adresses can send emails to adresses like [email protected], [email protected] etc... I would like to restrict the usage of those adresses only by ...
KaAzZ's user avatar
  • 33
4 votes
1 answer
9k views

How to block IP address on Apache when it comes from proxy

I have the URL I need to restrict access for specific IP (10.0.0.5). When I do it for direct access in the next way it works perfect: <Location /incoming> Order Allow,Deny Deny from 10....
Uri Gorobets's user avatar
0 votes
1 answer
28 views

how do i edit the username and password prompt window for my protected virtual path?

I am using abyss web server X2 to create this username and password prompt window for my protected virtual path. I would like to edit this prompt window or pop up with my custom text for the visitors....
jehovahsays's user avatar
2 votes
2 answers
824 views

Postfix reject unknown local recipients

I have a problem with backscatter. Spammers send emails to non existent username @ existent domain hosted on my server. I am trying to abort the session instead of sending bounce messages back to ...
J. Doe's user avatar
  • 21
-1 votes
1 answer
2k views

Allow winscp access, restrict direct shell access, allow su - for Linux server local user

Is it possible to restrict access for a particular local user in Linux, with below mentioned conditions: User should have no direct shell access User should be able to login with command "su -" from ...
Arun Krishnan's user avatar
4 votes
1 answer
3k views

rewrite / restrict specific domain name in apache

We have https://example1.com/login and example2.com/login being hosted from the same apache server (2.2.22). I want to restrict /login on example1.com. example1.com/login --> 404 (preferably) or 403 ...
akay's user avatar
  • 53
1 vote
1 answer
2k views

OLE error code 0x800704ec: This program is blocked by group policy. Using COM in VFP9

System outline: Server 2008 SP2 x86 running terminal services in a Windows domain. I've recently moved my working environment to a new server. I'm coding in Visual Fox Pro 9 on the system described ...
Digital ink's user avatar
1 vote
0 answers
726 views

Disallow JVM system security policy settings override

I've defined some parameters to file /usr/lib/jvm/jre-8-oracle-x64/lib/security/java.security to comply JAVA security settings with our security policy. Some parameter I have edited are security....
Baptiste Mille-Mathias's user avatar
0 votes
1 answer
328 views

Restrict access based on IP address to selected directories

<Directory /var/www/html/admin/> Order allow,deny Allow from 192.168.1.0/24 Allow from myip </Directory> Allow from 192.168.1.0/24 - do I need this line? Is this the best way and correct ...
Luis's user avatar
  • 3
0 votes
1 answer
38 views

Lost access to IP restricted server

So we have a server that has IP restrictions set for SSH, cPanel..etc and our static IP has been recently changed before we could update the IP restrictions meaning we have lost access. The support ...
Levi Cole's user avatar
  • 101
0 votes
1 answer
225 views

File Server Resource Manager only allow standard letters and numbers in filename

I have a FTP server (IIS) that only allows for certain file types to be uploaded (for example only images). I achieve this with the File Screening feature in the File Server Resource Manager. This ...
Trevi Awater's user avatar
0 votes
1 answer
3k views

Apache2: How to restrict access to specific IP with ProxyPass?

I have an Apache2 Server configured as Reverse Proxy on my perimeter network. There are a lot of VirtualHost configured with the ProxyPas directive. For a specific one, I want to restrict access to ...
magnum's user avatar
  • 9
2 votes
1 answer
468 views

Restricting access to \\127.0.0.1\c$ on Windows

In an enterprise environment, you usually have several locked down Windows servers (either Windows servers/Terminal server directly, or through Citrix) where the user is logged in directly into a full ...
invictus's user avatar
  • 135
0 votes
1 answer
12k views

Restrict sender and recipient with postfix

Sorry for doubling the questions about this topic but there are so many and some are very confusing, some are still "old" format and some others does not match my case. smtpd_restriction_classes = ...
aPugLife's user avatar
  • 287
2 votes
0 answers
101 views

Debian Postfix distribution list accessible only for few adresses

Actually I'm working with Postfix server and trying to implement distribution list with simple restrictions. My assumptions: I created alias: [email protected] -> [email protected], manager2@...
user334962's user avatar
2 votes
2 answers
277 views

Does any SATA drive work in any SATA port?

I was under the assumption (apart from restrictions due to old operating systems not being able to read large drives) that as long as a hard drive was of the same type as what is available for the ...
Mike's user avatar
  • 689
0 votes
2 answers
232 views

Restrict su command

I have user1 and user2. Normally, the user root can switch on all users with su command. I want to restrict su command so that the user root can switch only to user1. It is possible??
jjaros's user avatar
  • 259
3 votes
0 answers
671 views

Securing my NTP configuration

Need some assistance configuring my ntp.conf file for my primary NTP server. Does my configuration accomplish the following: Prevent the servers being polled from changing my configuration? Allow my ...
hilburies55's user avatar
1 vote
0 answers
325 views

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
Athafoud's user avatar
  • 149
0 votes
1 answer
354 views

Postfix block internal communications

I'd like to know how to block my users to send mail to each other but give them chance to send and receive external mail. [email protected] <---> [email protected] REJECT john@localdomain....
user283184's user avatar
-1 votes
2 answers
460 views

Postfix access restrictions

I use Postfix 2.9.6 from Debian7. Defined some virtual domains, all works fine as expected. Now I want to restrict incoming emails for one of my domains to accept email if it come from the same ...
Marcodor's user avatar
3 votes
1 answer
826 views

Restrict I/O Write usage using cgroups

I am trying to restrict I/O write usage on my server using cgroups. Here is my partition table info: major minor #blocks name 8 0 10485760 sda 8 1 9437184 sda1 8 ...
Divij Satra's user avatar
41 votes
2 answers
11k views

Is it possible to restrict the use of a root certificate to a domain

My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate. Is it possible to configure a root ...
MichaelD's user avatar
  • 545
2 votes
2 answers
1k views

smtpd_recipient_restrictions works but not always

I have POSTFIX set up to filter certain email addresses. The main.cf file contains: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blacklist, permit_mynetworks, ...
Kolja's user avatar
  • 199
-1 votes
1 answer
206 views

Prevent internet from being monopolized by one user

In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers. However, we want to prevent the ...
Sam Hendrickx's user avatar
-1 votes
1 answer
388 views

How to use ssh without knowing remote user's password? [closed]

I am trying to use ssh and login to a different mac (B) from my mac (A) but do not know B's password. Is there anyway of finding B's password or doing this without access to B?
Maanit Madan's user avatar