Questions tagged [restrictions]
The restrictions tag has no usage guidance.
66
questions
0
votes
0answers
12 views
postfix restrict sender and recipients for one domain only
I have a postfix server with multiple domains working fine.
For a specific domain only, I need to restrict sender and recipients so that it can send and receive mails only to/from another specific ...
0
votes
1answer
31 views
Allow reverse proxy access only from the host server
I have two servers A) frontend server (ip 11.22.33.44), B) backend server (ip 22.33.44.55).
Both use Debian Linux and Apache server.
A) frontend server uses reverse proxy to show content of B) backend ...
0
votes
0answers
29 views
Linux pam_time with groups
How do I allow /etc/security/time.conf to be able to restrict groups instead of users?
It works flawlessly with users but not with groups. I need to have multiple groups in my case.
1
vote
1answer
108 views
How does Apache mod_rewrite work to restrict by IP
I would like to accept only certain IP(s) for a few weeks.
Only accepted IP could load this -> www.example.com/login not the others.
Apache 2.2 is used. The code in mod_rewrite as below :
...
0
votes
1answer
24 views
Cloudflare prohibits API GET request
I am having a trouble with my API's GET request. I settled cloudflare as a firewall for my web application. Behind it, my web application is working on Nginx server. All HTTP Requests are working for ...
0
votes
0answers
15 views
Ubuntu: Pointing an SFTP user to its working directory without listing other user's directory
I am working on configuring an SFTP server on Ubuntu Server 18.04. I want to create SFTP accounts that point directly to their working directory without listing others. For example if the real working ...
0
votes
1answer
23 views
How to restrict access on only one website (with virtualhost based configuration in httpd) ? I wont to be accessible only from a specific country
I wont to do it from the webserver, is it possible? Or the best practice is with access list's in the fouter, but then how other sites will be accessible from everywhere?
The operating system is "...
0
votes
1answer
1k views
ACL conditional zone in Bind9
I'm trying to apply "restrictmoderate.youtube.com" only for kids and let the others access the standard "youtube.com", using Bind9.
# cat named.conf
include "/etc/bind/named.conf.options";
include "/...
0
votes
1answer
127 views
Nginx allow only specific API paths
I am very new to Nginx and I have below configuration in Nginx
server {
location /api {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:3000;
...
0
votes
1answer
131 views
Blocking Azure Web App externally breaks internal
I am trying to lock down an Azure website we have running to our intranet. I have browsed to App Services > Webappname > Networking > Access Restrictions but when I enter the two "allow" ...
0
votes
1answer
1k views
Restricted SFTP-only access to a single directory using OpenSSH
I configured SFTP using open SSH by using following link on my windows server 2012
Installing SFTP (SSH FTP) Server on Windows Server 2012 R2
It is well configured and perfectly working fine ..
I ...
0
votes
1answer
51 views
Can I limit Windows 7 or 10 VPN users access
I'm about to set up a simple network and i need to give some ppl remote access and am thinking about setting up windows VPN for that.
Imagine I have 10 routers on this network and I need to give some ...
1
vote
0answers
104 views
IIS 7 IP and Domain Restrictions not working (set to deny by default)
I have a website on IIS and I am trying to block access to one particular folder from anywhere but our LAN. To experiment, I have added both an explicit deny rule for one particular machine on the ...
1
vote
0answers
41 views
How to restrict or hide users to specific drives only (not typical drives combinations)
How can I restrict users (not admins) to access to specific drives?
I know there is gp that allows to restrict typical combinations of drives, like C, A, B, D etc... But I would like to allow all ...
1
vote
0answers
57 views
Can I limit users to VDI
I have a task to enable users to only access VDI(horizon view) when they login to their laptop or desktop.
This should restrict then from any other actions than accessing the view application.
...
0
votes
2answers
72 views
Amazon web service visibility restriction to instances under same account [duplicate]
I'm looking for a possible idea to restrict the visibility ec2 instances to certain IAM users under the same root account.
custom policies doesn't seem to work because describeInstances doesn't ...
0
votes
1answer
748 views
Postfix restrict incoming emails on a specific adress to adress of the same domain
My SMTP server is being abused because external adresses can send emails to adresses like all@mydomain.com, dev@mydomain.com etc...
I would like to restrict the usage of those adresses only by ...
2
votes
1answer
5k views
How to block IP address on Apache when it comes from proxy
I have the URL I need to restrict access for specific IP (10.0.0.5).
When I do it for direct access in the next way it works perfect:
<Location /incoming>
Order Allow,Deny
Deny from 10....
0
votes
1answer
21 views
how do i edit the username and password prompt window for my protected virtual path?
I am using abyss web server X2 to create this username and password prompt window for my protected virtual path.
I would like to edit this prompt window or pop up with my custom text for the visitors....
2
votes
2answers
730 views
Postfix reject unknown local recipients
I have a problem with backscatter. Spammers send emails to non existent username @ existent domain hosted on my server. I am trying to abort the session instead of sending bounce messages back to ...
-1
votes
1answer
1k views
Allow winscp access, restrict direct shell access, allow su - for Linux server local user
Is it possible to restrict access for a particular local user in Linux, with below mentioned conditions:
User should have no direct shell access
User should be able to login with command "su -" from ...
3
votes
1answer
2k views
rewrite / restrict specific domain name in apache
We have https://example1.com/login and example2.com/login being hosted from the same apache server (2.2.22). I want to restrict /login on example1.com.
example1.com/login --> 404 (preferably) or 403
...
1
vote
1answer
1k views
OLE error code 0x800704ec: This program is blocked by group policy. Using COM in VFP9
System outline: Server 2008 SP2 x86 running terminal services in a Windows domain.
I've recently moved my working environment to a new server. I'm coding in Visual Fox Pro 9 on the system described ...
1
vote
0answers
551 views
Disallow JVM system security policy settings override
I've defined some parameters to file /usr/lib/jvm/jre-8-oracle-x64/lib/security/java.security to comply JAVA security settings with our security policy.
Some parameter I have edited are
security....
-1
votes
1answer
211 views
Restrict access based on IP address to selected directories
<Directory /var/www/html/admin/>
Order allow,deny
Allow from 192.168.1.0/24
Allow from myip
</Directory>
Allow from 192.168.1.0/24 - do I need this line? Is this the best way and correct ...
0
votes
1answer
33 views
Lost access to IP restricted server
So we have a server that has IP restrictions set for SSH, cPanel..etc and our static IP has been recently changed before we could update the IP restrictions meaning we have lost access. The support ...
0
votes
1answer
115 views
File Server Resource Manager only allow standard letters and numbers in filename
I have a FTP server (IIS) that only allows for certain file types to be uploaded (for example only images). I achieve this with the File Screening feature in the File Server Resource Manager.
This ...
0
votes
1answer
2k views
Apache2: How to restrict access to specific IP with ProxyPass?
I have an Apache2 Server configured as Reverse Proxy on my perimeter network.
There are a lot of VirtualHost configured with the ProxyPas directive.
For a specific one, I want to restrict access to ...
2
votes
1answer
372 views
Restricting access to \\127.0.0.1\c$ on Windows
In an enterprise environment, you usually have several locked down Windows servers (either Windows servers/Terminal server directly, or through Citrix) where the user is logged in directly into a full ...
0
votes
1answer
7k views
Restrict sender and recipient with postfix
Sorry for doubling the questions about this topic but there are so many and some are very confusing, some are still "old" format and some others does not match my case.
smtpd_restriction_classes = ...
2
votes
0answers
45 views
Debian Postfix distribution list accessible only for few adresses
Actually I'm working with Postfix server and trying to implement distribution list with simple restrictions.
My assumptions:
I created alias:
managers@mydomain.com -> manager1@mydomain.com, manager2@...
2
votes
2answers
248 views
Does any SATA drive work in any SATA port?
I was under the assumption (apart from restrictions due to old operating systems not being able to read large drives) that as long as a hard drive was of the same type as what is available for the ...
0
votes
2answers
215 views
Restrict su command
I have user1 and user2. Normally, the user root can switch on all users with su command.
I want to restrict su command so that the user root can switch only to user1. It is possible??
3
votes
0answers
561 views
Securing my NTP configuration
Need some assistance configuring my ntp.conf file for my primary NTP server.
Does my configuration accomplish the following:
Prevent the servers being polled from changing my configuration?
Allow my ...
1
vote
0answers
228 views
Openstack - Restrict user access to Regions Or Zones
We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those ...
0
votes
1answer
272 views
Postfix block internal communications
I'd like to know how to block my users to send mail to each other but give them chance to send and receive external mail.
john@localdomain.com <---> julie@localdomain.com REJECT
john@localdomain....
-1
votes
2answers
305 views
Postfix access restrictions
I use Postfix 2.9.6 from Debian7. Defined some virtual domains, all works fine as expected.
Now I want to restrict incoming emails for one of my domains to accept email if it come from the same ...
3
votes
1answer
780 views
Restrict I/O Write usage using cgroups
I am trying to restrict I/O write usage on my server using cgroups.
Here is my partition table info:
major minor #blocks name
8 0 10485760 sda
8 1 9437184 sda1
8 ...
31
votes
2answers
8k views
Is it possible to restrict the use of a root certificate to a domain
My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate.
Is it possible to configure a root ...
2
votes
2answers
930 views
smtpd_recipient_restrictions works but not always
I have POSTFIX set up to filter certain email addresses. The main.cf file contains:
smtpd_recipient_restrictions =
check_recipient_access hash:/etc/postfix/blacklist,
permit_mynetworks,
...
-1
votes
1answer
191 views
Prevent internet from being monopolized by one user
In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers.
However, we want to prevent the ...
-1
votes
1answer
344 views
How to use ssh without knowing remote user's password? [closed]
I am trying to use ssh and login to a different mac (B) from my mac (A) but do not know B's password. Is there anyway of finding B's password or doing this without access to B?
1
vote
1answer
492 views
Impact of enforcing software restriction policies via GPO 2008r2
We are trying to prevent the execution of certain system related executables by regular users on our network (mmc, cmd, ldp, etc.). I have suggested the use of software hashing rules but I am ...
1
vote
3answers
11k views
postfix permit_sasl_authenticated in smtpd_client_restrictions for submission on 587
First let me explain my setup. I'm using postfix 2.9.6 on Debian Wheezy. I do not allow AUTH on port 25, and force MUAs to use a submission service on port 587 instead. Debian comes with the following ...
2
votes
1answer
707 views
Postfix does not reject wrong client and HELO name
I have a postfix server configured with reject_unknown_client_hostname and reject_unknown_helo_hostname. Regardless the server accepts non sasl_authenticated connections from clients and HELO names ...
0
votes
2answers
2k views
Group Policy - Software Restrictions
I've just set up a new server on a new Domain Controller. I have implemented my Group Policy too. However, I would like to implement a policy to restrict the installation of all software by users and ...
2
votes
1answer
3k views
Postfix check_policy_service - only checking incoming mail, ignoring internal and outgoing
I'm trying to set up a policyd server on Centos x64 (selinux disabled), which will allow me for limiting numer of messages incoming from different servers and (more important) outgoing from different ...
1
vote
2answers
7k views
Restricted Groups not working
I have several GPOs set up on our domain at work, in one GPO I have the group set to be Local Administrators via the Restricted Groups feature. However, when one of the users in this group logs in to ...
1
vote
2answers
838 views
Need Help locking down many networked public computers
Does anybody know any type of system lockdown/parental control software that will work for networked machines, with users that may or may have not already setup an account on the local machine?
I'm ...
3
votes
1answer
942 views
Postfix changes to main.cf are not loaded
Ubuntu 10.04 LTS
root@vm1613:/etc/postfix# vim /etc/postfix/main.cf
[...]
# default restrictions
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, ...
