Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [rules]

The tag has no usage guidance.

1
vote
0answers
40 views

how to use perl-find-rules to find files with 777 perms [migrated]

I want to use perl::Find::Rule in order to find files in the server that have perms 777 I know that the module has stats tests so i could simply do this: $rule->mode(33279) I found the 33279 by ...
0
votes
2answers
108 views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
0answers
36 views

OSSEC rule doesn't generate alert

I've setup monitoring of command output in OSSEC agent conf file (ossec.conf) on Windows Server 2012 R2 - <localfile> <log_format>command</log_format> <command>query ...
0
votes
2answers
139 views

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
0
votes
1answer
330 views

Office 365 Exchange automatically delete deleted items

How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
0
votes
0answers
30 views

exim filter ignore dots

I have exim filter but ignores dot in from section I wish exim to be able to catch only domain ends with .online e.g jessica@seomyonline.online however it catches also this email which I don't ...
0
votes
2answers
238 views

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept ...
0
votes
1answer
570 views

Cannot set GeoIP rules in iptables

I try to add this rule: iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User But it doesn't work,...
0
votes
2answers
697 views

Performance of iptables

I would like to ask you what is performance of iptables. Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule. I don't know ...
1
vote
1answer
269 views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
0
votes
0answers
109 views

Exchange 2010 Transport rule to auto accept meeting invite for user is not working

We are doing to send bulk meetings on Exchange 2010, where a ServiceAccount is creating the meetings. The users will receive multiple emails in the mailbox. We would like to auto-accept the invite ...
0
votes
1answer
53 views

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. ...
0
votes
1answer
22 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
0
votes
0answers
151 views

Modsecurity does not accep files (jpeg, mp4 and zip) from Android device

I have compiled modsecurity with nginx(1.13.6) on ubuntu 16.04. I am able to post requests from iOS devices. But Android devices(Retrofit Http client) are not allowed to upload files(jpeg, mp4 and zip)...
0
votes
1answer
50 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
4
votes
0answers
785 views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
2
votes
1answer
176 views

Overwritten auditd rules in PCI DSS environement

I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS". When I was checkin the rules applied on /etc/audit/...
0
votes
1answer
618 views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
0
votes
1answer
190 views

How to secure internet access to go only via captive portal rules?

I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction. The thing I want is to set the ...
0
votes
1answer
910 views

How to set up nested acl rules in HAProxy?

I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
0
votes
1answer
2k views

Nginx reverse proxy trailing slash

This question is already answered multiple times but in my case there is a twist. I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
0
votes
0answers
443 views

Iptables: Forward All Traffic to Remote Host

I am currently having a 192.168.0/24 network, while 192.168.0.1 is the gateway and 192.168.0.2 is the transparent proxy. Now I want to forward all TCP traffic (all ports) that sent to 192.168.0.1, ...
1
vote
1answer
787 views

All methods of making iptables persist are not working

I set rules in iptables a few months back and used iptables-persistent to make the rules persist through reboot. I just updated my rules and am trying to make them persist but nothing is working they ...
-2
votes
1answer
229 views

Nginx force https only for index page

What's the best way to set up nginx conf to force https on the index.php page only and every other page be forced to http. thanks
0
votes
1answer
253 views

rSyslog - Rule for all (UDP) remote massages

Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems) So for example I would do something like this ...
0
votes
1answer
113 views

Nginx rules conversion

I have these htaccess rules: <IfModule mod_rewrite.c> <IfModule mod_negotiation.c> Options -MultiViews </IfModule> RewriteEngine On # Redirect Trailing Slashes... RewriteRule ^...
2
votes
1answer
93 views

how to configure ipaddress filters with system-config-firewall

The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule: -A INPUT -m state -...
0
votes
1answer
809 views

ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working... I already tried the following configurations (I know that some of them are depreciated but it's ...
-3
votes
1answer
94 views

Linux firewall packet handling

When a client communicates with a the server via HTTP, for example, there are many packets going in both directions. It means from the client to the server and vice versa. I would like to ask how ...
0
votes
0answers
346 views

Anti-Affinity Rules not Enabling in vCenter 6.0

Can anyone please help. I am building a new vCenter with 3 hosts, all running VMWare ESXi 6.0. I currently have about 16-18 VMs created. I have been able to create a number of Affinity and Anti-...
0
votes
0answers
77 views

iptables: still all ports open even if access had been restricted

Server: Debian 8.0 iptables v1.4.21 Scenario: I restricted access for aliens to all ports except 80/433. But aliens still can see all ports as "Open" when they use port scanner. But they can't use ...
1
vote
0answers
211 views

rsyslog parsing logs with liblognorm

I'm trying to use such .rb file to parse logs: version=2 rule=:%Server:char-to:\t%\t%stamp:char-to:\t%\t%ip:ipv4%\t%Site:char-to:\t%\t%BID:char-to:\t%\t%SID:char-to:\t%\t%LD:char-to:\t%\t%UserID:...
0
votes
1answer
39 views

Transport rule disclaimer in new emails before sending

I have created a transport rule in exchange 2010 so attach disclaimers to emails. Is it possible to make this disclaimers visible in the newly created email before it is sent?
0
votes
1answer
783 views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
1answer
300 views

Adding signatures to emails via transport rule in exchange management console

I am trying to setup a transport rule in exchange management console which creates a signature at the end of a users emails. This seems to work. The problem however, is that the signature gets added ...
0
votes
1answer
818 views

SecRuleEngine Off not working on a single domain in virtual host

I have modSecurity installed and working on a server with multiple hosts and I want to disable some rules for one host only. This is what is what I put in the virtual host file: <IfModule ...
3
votes
2answers
159 views

Internet facing Hub Transport Exchange server with Internet restricted users and a Canon Copier

This is a rather convoluted problem but I hope that someone out there has experienced a similar situation. Here are the facts of what is happening: We have a single Exchange 2010 server that is ...
-2
votes
1answer
46 views

Creating subfolder for sendmail user [closed]

We use sendmail for automated email alerts such as info@compnayname.com or alerts@companyname.com. It's a simple sendmail configuration where these emails are created and then an alias is used to ...
0
votes
1answer
47 views

Iptables rules, how to allow another server IPs

I have 5 ips 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 i already install openvz & openvz webpanel in main ip then create a vps with ip 1.1.1.2 i cant open 1.1.1.2, but if i disable iptables ...
2
votes
2answers
13k views

How long does it take for an Exchange Transport Rule to STOP applying after it is deleted?

Yesterday my company was hit with a new trojan that uses the old social method of "it came from someone I trust" to suspend user's suspicion (and rationality) and it was opened and run. During the ...
2
votes
1answer
1k views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
2
votes
1answer
68 views

Configuring firewall rules

I am trying to configure firewall rules for my windows PC i would like to achieve this scenario All packets from PC A will use this proxy server x.x.x.x at port AA However, these are my rules ...
1
vote
1answer
250 views

Removing User Defined chain having links

I have a user defined chain which is linked with the INPUT chain in the filter table. How do i remove this link so that i can remove my user chain ? Linked in the sense i have made a jump connection ...
0
votes
1answer
379 views

Ejabberd returning 503 Service Unavailable when trying in-channel registration

I've put the following snippet into my ejabberd.cfg, under the modules section: {mod_register, [ {ip_access, "my.ip.add.ress"}, %%% some default rules included ...
-1
votes
1answer
166 views

When should I use the different tables in iptables?

I am new to iptables and a bit confused. What I would like to know is, for example, if I need to block a certain IP from accessing my server, should I add the rule to the mangle table or the filter ...
1
vote
2answers
1k views

saving iptables rules without logging in to root

I am trying to save iptables rules file to /etc/sysconfig/iptables. I want to do this without logging in to root. I tried to using sudo iptables-save > /etc/sysconfig/iptables but it throws ...
-1
votes
1answer
585 views

Loading iptables rules at boot

i have added some rules to the iptables. I saved the iptables rules using the command iptables-save > /etc/sysconfig/iptables To apply the rules i did systemctl start iptables.service When ...
2
votes
2answers
1k views

Restoring iptables at boot (rc.local)

I have saved my iptables rules using the iptables-save > command and i am trying to restore these rules when the machine boots up. I have added the command iptables-restore < "path to rules file"...
2
votes
1answer
1k views

Iptables rule to block ip range for a specific string (works sometimes)

After a two week search and read I ended up with this iptable rule that blocks youtube (as string) to an ip range in my office network. iptables -A FORWARD -t filter -m iprange --src-range 10.217.76....
0
votes
1answer
413 views

Is it possible to write a udev rule to keep other udev rules from running?

This http://reactivated.net/writing_udev_rules.html says It is important to understand that udev will not stop processing when it finds a matching rule, it will continue searching and attempt ...