Questions tagged [rules]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
92 views

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
0
votes
1answer
32 views

OpenVPN Server Routing/Firewall Settings [closed]

Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)" Long Desc: ...
0
votes
0answers
13 views

How to use modsecurity RemoveTargetById to modify an existing rule

I have a rule I am trying to modify for just one host. Here is the rule: SecRule REQUEST_FILENAME "@pmFromFile restricted-files.data" \ "id:930130,\ phase:2,\ block,\ capture,\ t:...
0
votes
0answers
15 views

Destination Servers Unreachable without any errors

I have a server that was reaching another server but after reboot they can't reach each other , below you will find he configuration . Source :10.18.33.122 Destination :10.122.244.1 netstat -rn ...
0
votes
1answer
50 views

Exchange 2010 - Moderate mails sent to Distribution Group “All employees” by sender manager

In Exchange 2010 we can moderate mails sent to a distribution list, directly from the distribution list parameters. It is the same moderators for all the senders. This is perfect except that wen ...
0
votes
1answer
82 views

.htaccess to nginx rules

I've read lots of threads here and in other community forums, also tried some htaccess to nginx generators, but I'm struck with this. Thats my .htaccess <IfModule mod_rewrite.c> ...
0
votes
1answer
328 views

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new ...
0
votes
1answer
186 views

Outlook forwarding in shared mailbox deletes emails

I have the following Situation which I do not understand: Situation until now 1. I have a shared o365 mailbox "AppSupport" Within the mailbox there is a rule prefixing the subject line with "[...
1
vote
0answers
87 views

If statements in udev rules

Is it possible to make statements in udev rules via if, else or case? I imagine something like: if [ $HOSTNAME == "host1" ] then ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
1
vote
1answer
525 views

Office365: Error trying to create Inbox Rule via PowerShell

In our Office365 environment I'm trying to programmatically create rules that will move incoming messages based on the distribution list they were received as. However, while prototyping, the ...
0
votes
0answers
217 views

Configuring the NSG rules for reverse proxy in Azure

I have the following config in Azure: 1 Azure VM (Debian 9) with latest nginx installed acting as a reverse proxy. Config file below: server { listen 443; ssl on; ...
0
votes
1answer
78 views

Shorewall - Allow Remote Client to Ping the Internet

My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The ...
0
votes
0answers
33 views

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any ...
0
votes
0answers
35 views

Add rule in .htacces only if domain name begins with <regular-expression>

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have this: #!/...
0
votes
1answer
406 views

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-...
0
votes
2answers
11k views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
2answers
733 views

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
0
votes
1answer
1k views

Office 365 Exchange automatically delete deleted items

How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
0
votes
2answers
1k views

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept ...
1
vote
1answer
1k views

Cannot set GeoIP rules in iptables

I try to add this rule: iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User But it doesn't work,...
0
votes
2answers
2k views

Performance of iptables

I would like to ask you what is performance of iptables. Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule. I don't know ...
1
vote
1answer
650 views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
0
votes
1answer
196 views

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. ...
0
votes
1answer
34 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
0
votes
1answer
67 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
3
votes
0answers
2k views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
2
votes
1answer
332 views

Overwritten auditd rules in PCI DSS environement

I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS". When I was checkin the rules applied on /etc/audit/...
0
votes
1answer
1k views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
0
votes
1answer
311 views

How to secure internet access to go only via captive portal rules?

I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction. The thing I want is to set the ...
0
votes
1answer
1k views

How to set up nested acl rules in HAProxy?

I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
0
votes
1answer
3k views

Nginx reverse proxy trailing slash

This question is already answered multiple times but in my case there is a twist. I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
1
vote
1answer
1k views

All methods of making iptables persist are not working

I set rules in iptables a few months back and used iptables-persistent to make the rules persist through reboot. I just updated my rules and am trying to make them persist but nothing is working they ...
-2
votes
1answer
284 views

Nginx force https only for index page

What's the best way to set up nginx conf to force https on the index.php page only and every other page be forced to http. thanks
0
votes
1answer
482 views

rSyslog - Rule for all (UDP) remote massages

Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems) So for example I would do something like this ...
0
votes
1answer
166 views

Nginx rules conversion

I have these htaccess rules: <IfModule mod_rewrite.c> <IfModule mod_negotiation.c> Options -MultiViews </IfModule> RewriteEngine On # Redirect Trailing Slashes... RewriteRule ^...
2
votes
1answer
178 views

how to configure ipaddress filters with system-config-firewall

The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule: -A INPUT -m state -...
0
votes
1answer
1k views

ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working... I already tried the following configurations (I know that some of them are depreciated but it's ...
-3
votes
1answer
103 views

Linux firewall packet handling

When a client communicates with a the server via HTTP, for example, there are many packets going in both directions. It means from the client to the server and vice versa. I would like to ask how ...
0
votes
0answers
388 views

Anti-Affinity Rules not Enabling in vCenter 6.0

Can anyone please help. I am building a new vCenter with 3 hosts, all running VMWare ESXi 6.0. I currently have about 16-18 VMs created. I have been able to create a number of Affinity and Anti-...
1
vote
0answers
268 views

rsyslog parsing logs with liblognorm

I'm trying to use such .rb file to parse logs: version=2 rule=:%Server:char-to:\t%\t%stamp:char-to:\t%\t%ip:ipv4%\t%Site:char-to:\t%\t%BID:char-to:\t%\t%SID:char-to:\t%\t%LD:char-to:\t%\t%UserID:...
0
votes
1answer
45 views

Transport rule disclaimer in new emails before sending

I have created a transport rule in exchange 2010 so attach disclaimers to emails. Is it possible to make this disclaimers visible in the newly created email before it is sent?
0
votes
2answers
1k views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
1answer
368 views

Adding signatures to emails via transport rule in exchange management console

I am trying to setup a transport rule in exchange management console which creates a signature at the end of a users emails. This seems to work. The problem however, is that the signature gets added ...
0
votes
1answer
2k views

SecRuleEngine Off not working on a single domain in virtual host

I have modSecurity installed and working on a server with multiple hosts and I want to disable some rules for one host only. This is what is what I put in the virtual host file: <IfModule ...
3
votes
2answers
178 views

Internet facing Hub Transport Exchange server with Internet restricted users and a Canon Copier

This is a rather convoluted problem but I hope that someone out there has experienced a similar situation. Here are the facts of what is happening: We have a single Exchange 2010 server that is ...
-2
votes
1answer
49 views

Creating subfolder for sendmail user [closed]

We use sendmail for automated email alerts such as info@compnayname.com or alerts@companyname.com. It's a simple sendmail configuration where these emails are created and then an alias is used to ...
0
votes
1answer
48 views

Iptables rules, how to allow another server IPs

I have 5 ips 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 i already install openvz & openvz webpanel in main ip then create a vps with ip 1.1.1.2 i cant open 1.1.1.2, but if i disable iptables ...
2
votes
2answers
18k views

How long does it take for an Exchange Transport Rule to STOP applying after it is deleted?

Yesterday my company was hit with a new trojan that uses the old social method of "it came from someone I trust" to suspend user's suspicion (and rationality) and it was opened and run. During the ...
3
votes
1answer
1k views

allow only one ip and block others by using cmd in windows firewall

I want to allow one IP address that can connect to internet (whitelist) and block others' connections through internet using Windows Firewall on Server 2008 using command prompt. Is it possible to ...
2
votes
1answer
77 views

Configuring firewall rules

I am trying to configure firewall rules for my windows PC i would like to achieve this scenario All packets from PC A will use this proxy server x.x.x.x at port AA However, these are my rules ...