Questions tagged [rules]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

iptables rule with network interface not working

I have problem that if in IPTABLES I insert network interface it's not woking if without network interface it's ok. My iptables: https://i2.paste.pics/cce26e3f680e2b...08e514f9cb.png and if I use rule ...
user avatar
0 votes
1 answer
162 views

rewrite rules from apache to nginx

I have a problem with this... I'm using free hosting for giving a demo to my future buyers of my own cms. The hosting is hubuhost.com, they are supporting the last version of php 8.1. The problem is ...
user avatar
  • 3
0 votes
1 answer
94 views

Setting sender address in Exchange 365 notifications

We are running Office 365 including Exchange. I've set up a rule to delete messages with attachments with a certain extension, and send a notification to the recipient. This is done with two separate ...
user avatar
0 votes
0 answers
27 views

URL rewriting only in main domain

I am trying to use a package to optimize my main site and when I follow the instructions it works great but it messes up all subdomains as well. Can I somehow exclude any subdomain from this location ...
user avatar
0 votes
0 answers
262 views

nginx reverse proxy doesn't work with POST request returning 404 error

nginx reverse proxy doesn't work with POST request returning 404 error the rule is location /mio-bff { rewrite ^/mio-bff(.*)$ $1/ break; proxy_pass http://mio-bff.cl-milugar:80; ...
user avatar
0 votes
0 answers
37 views

nginx rewrite rules: Rewrite https://Frontend/backend/Api/SelectAllBranch/ to https://Backend/Api/SelectAllBranch/ or .../SelectAllBranch

I'm using this configuration to nginx proxy reverso location /backend { rewrite ^/backend(.*)$ $1/ break; proxy_pass http://credentials-web-bff.cl-milugar:5000; proxy_redirect off; ...
user avatar
0 votes
1 answer
77 views

How to add a routing rule that only match "dport"?

In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following: ip rule add from 192.168.28.2 dport 1888 lookup 123 ip ...
user avatar
  • 137
0 votes
0 answers
49 views

Disable URL decoding in certain urls KEMP Load Balancer

So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking ...
user avatar
  • 119
1 vote
2 answers
216 views

iptables hashlimit rate is not working as expected

I wrote the following firewall rule: iptables -A INPUT -m hashlimit --hashlimit 1/hour --hashlimit-burst 3 --hashlimit-mode srcip,dstport --hashlimit-name ssh -j ACCEPT I was expecting the burst to ...
user avatar
  • 15
0 votes
0 answers
31 views

NGINX point subdomain to dyanimc directory

Suppose I have a domain example.com and it is located in www/wwwroot/example. I also have created a subdomain api.example.com by creating a CNAME api pointing to example.com. For the usage purposes, I ...
user avatar
0 votes
1 answer
75 views

Want to enable Windows Server firewall - how to know what ports to open

For added security, we're thinking of enabling the firewalls on our 2016 and 2019 servers. Currently, they're all behind our edge router/firewall, and every server has its firewall disabled. Sometimes,...
user avatar
  • 123
0 votes
1 answer
92 views

Postfix SMTP only localhost login - disable remote login

I have configured postfix + dovecot on a debain 10. I have installed a web server to have webmail with roundcube. I don't want anyone other than roundcube to be able to use mail services, so I'm only ...
user avatar
0 votes
0 answers
21 views

How to get old bash tab completion rules back - stopping before next subdirectory

Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
user avatar
  • 1
0 votes
0 answers
54 views

Firewalld: how are rules of the same priority ordered?

I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority. According to the documentation, it says that there is no guarantee that rules with the ...
user avatar
0 votes
0 answers
125 views

Setup dynamic ip route via rules

I've got a setup like: |<-->|---> server 1 <---| clients <-| <--> proxy <--> |<-->|---> server 2 <---| Hope my ASCII ...
user avatar
0 votes
0 answers
72 views

nginx rule for /anything to /home?p1=anthing

I am very new to nginx. So, need help. I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
user avatar
  • 101
1 vote
1 answer
1k views

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
user avatar
0 votes
1 answer
1k views

OpenVPN Server Routing/Firewall Settings [closed]

Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)" Long Desc: ...
user avatar
  • 103
0 votes
1 answer
238 views

Exchange 2010 - Moderate mails sent to Distribution Group "All employees" by sender manager

In Exchange 2010 we can moderate mails sent to a distribution list, directly from the distribution list parameters. It is the same moderators for all the senders. This is perfect except that wen ...
user avatar
0 votes
1 answer
187 views

.htaccess to nginx rules

I've read lots of threads here and in other community forums, also tried some htaccess to nginx generators, but I'm struck with this. Thats my .htaccess <IfModule mod_rewrite.c> ...
user avatar
0 votes
1 answer
487 views

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new ...
user avatar
0 votes
1 answer
454 views

Outlook forwarding in shared mailbox deletes emails

I have the following Situation which I do not understand: Situation until now 1. I have a shared o365 mailbox "AppSupport" Within the mailbox there is a rule prefixing the subject line with "[...
user avatar
1 vote
0 answers
291 views

If statements in udev rules

Is it possible to make statements in udev rules via if, else or case? I imagine something like: if [ $HOSTNAME == "host1" ] then ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
user avatar
  • 35
1 vote
1 answer
2k views

Office365: Error trying to create Inbox Rule via PowerShell

In our Office365 environment I'm trying to programmatically create rules that will move incoming messages based on the distribution list they were received as. However, while prototyping, the ...
user avatar
0 votes
1 answer
335 views

Shorewall - Allow Remote Client to Ping the Internet

My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The ...
user avatar
0 votes
0 answers
69 views

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any ...
user avatar
0 votes
0 answers
47 views

Add rule in .htacces only if domain name begins with <regular-expression>

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have this: #!/...
user avatar
0 votes
1 answer
874 views

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-...
user avatar
  • 175
0 votes
2 answers
18k views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
user avatar
0 votes
2 answers
1k views

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
user avatar
  • 519
1 vote
1 answer
2k views

Office 365 Exchange automatically delete deleted items

How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
user avatar
  • 125
0 votes
2 answers
2k views

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept ...
user avatar
  • 257
1 vote
1 answer
2k views

Cannot set GeoIP rules in iptables

I try to add this rule: iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User But it doesn't work,...
user avatar
  • 257
1 vote
2 answers
4k views

Performance of iptables

I would like to ask you what is performance of iptables. Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule. I don't know ...
user avatar
  • 257
1 vote
1 answer
1k views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
user avatar
  • 257
0 votes
1 answer
286 views

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. ...
user avatar
  • 11
0 votes
1 answer
46 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
user avatar
  • 11
0 votes
1 answer
146 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
user avatar
  • 253
3 votes
0 answers
3k views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
user avatar
2 votes
1 answer
518 views

Overwritten auditd rules in PCI DSS environement

I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS". When I was checkin the rules applied on /etc/audit/...
user avatar
  • 322
0 votes
1 answer
2k views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
user avatar
  • 1
0 votes
1 answer
362 views

How to secure internet access to go only via captive portal rules?

I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction. The thing I want is to set the ...
user avatar
0 votes
1 answer
1k views

How to set up nested acl rules in HAProxy?

I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
user avatar
  • 229
1 vote
1 answer
4k views

Nginx reverse proxy trailing slash

This question is already answered multiple times but in my case there is a twist. I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
user avatar
2 votes
1 answer
2k views

All methods of making iptables persist are not working

I set rules in iptables a few months back and used iptables-persistent to make the rules persist through reboot. I just updated my rules and am trying to make them persist but nothing is working they ...
user avatar
-2 votes
1 answer
328 views

Nginx force https only for index page

What's the best way to set up nginx conf to force https on the index.php page only and every other page be forced to http. thanks
user avatar
  • 33
0 votes
1 answer
667 views

rSyslog - Rule for all (UDP) remote massages

Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems) So for example I would do something like this ...
user avatar
0 votes
1 answer
206 views

Nginx rules conversion

I have these htaccess rules: <IfModule mod_rewrite.c> <IfModule mod_negotiation.c> Options -MultiViews </IfModule> RewriteEngine On # Redirect Trailing Slashes... RewriteRule ^...
user avatar
  • 33
2 votes
1 answer
254 views

how to configure ipaddress filters with system-config-firewall

The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule: -A INPUT -m state -...
user avatar
0 votes
1 answer
2k views

ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working... I already tried the following configurations (I know that some of them are depreciated but it's ...
user avatar