Questions tagged [rules]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
36 views

Postfix SMTP only localhost login - disable remote login

I have configured postfix + dovecot on a debain 10. I have installed a web server to have webmail with roundcube. I don't want anyone other than roundcube to be able to use mail services, so I'm only ...
0
votes
0answers
29 views

Ubuntu UFW blocks connections when enabled

Ubuntu 18.04.5 LTS Can someone help me with UFW problem because it is some magic... 3 months ago I have added rules and everything worked. Today I can't access server via SSH. Server IP and my IP ...
0
votes
0answers
13 views

How to get old bash tab completion rules back - stopping before next subdirectory

Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
0
votes
0answers
29 views

Firewalld: how are rules of the same priority ordered?

I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority. According to the documentation, it says that there is no guarantee that rules with the ...
0
votes
0answers
49 views

Setup dynamic ip route via rules

I've got a setup like: |<-->|---> server 1 <---| clients <-| <--> proxy <--> |<-->|---> server 2 <---| Hope my ASCII ...
0
votes
0answers
69 views

nginx rule for /anything to /home?p1=anthing

I am very new to nginx. So, need help. I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
0
votes
0answers
248 views

how can I write a rule to pass tcp:sec traffic in pfsense?

I need help about pfsense rule definition. This device that I'm working with, has a floating rule that passes all traffic between interfaces. I want to define essential rules on each interface and ...
0
votes
1answer
543 views

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
0
votes
1answer
294 views

OpenVPN Server Routing/Firewall Settings [closed]

Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)" Long Desc: ...
0
votes
1answer
148 views

Exchange 2010 - Moderate mails sent to Distribution Group “All employees” by sender manager

In Exchange 2010 we can moderate mails sent to a distribution list, directly from the distribution list parameters. It is the same moderators for all the senders. This is perfect except that wen ...
0
votes
1answer
111 views

.htaccess to nginx rules

I've read lots of threads here and in other community forums, also tried some htaccess to nginx generators, but I'm struck with this. Thats my .htaccess <IfModule mod_rewrite.c> ...
0
votes
1answer
431 views

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new ...
0
votes
1answer
331 views

Outlook forwarding in shared mailbox deletes emails

I have the following Situation which I do not understand: Situation until now 1. I have a shared o365 mailbox "AppSupport" Within the mailbox there is a rule prefixing the subject line with "[...
1
vote
0answers
196 views

If statements in udev rules

Is it possible to make statements in udev rules via if, else or case? I imagine something like: if [ $HOSTNAME == "host1" ] then ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
1
vote
1answer
1k views

Office365: Error trying to create Inbox Rule via PowerShell

In our Office365 environment I'm trying to programmatically create rules that will move incoming messages based on the distribution list they were received as. However, while prototyping, the ...
0
votes
1answer
159 views

Shorewall - Allow Remote Client to Ping the Internet

My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The ...
0
votes
0answers
49 views

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any ...
0
votes
0answers
41 views

Add rule in .htacces only if domain name begins with <regular-expression>

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have this: #!/...
0
votes
1answer
710 views

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-...
0
votes
2answers
15k views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
2answers
1k views

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
1
vote
1answer
2k views

Office 365 Exchange automatically delete deleted items

How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
0
votes
2answers
2k views

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept ...
1
vote
1answer
1k views

Cannot set GeoIP rules in iptables

I try to add this rule: iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User But it doesn't work,...
0
votes
2answers
3k views

Performance of iptables

I would like to ask you what is performance of iptables. Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule. I don't know ...
0
votes
1answer
935 views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
0
votes
1answer
232 views

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. ...
0
votes
1answer
38 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
0
votes
1answer
92 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
3
votes
0answers
2k views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
2
votes
1answer
390 views

Overwritten auditd rules in PCI DSS environement

I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS". When I was checkin the rules applied on /etc/audit/...
0
votes
1answer
1k views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
0
votes
1answer
356 views

How to secure internet access to go only via captive portal rules?

I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction. The thing I want is to set the ...
0
votes
1answer
1k views

How to set up nested acl rules in HAProxy?

I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
0
votes
1answer
3k views

Nginx reverse proxy trailing slash

This question is already answered multiple times but in my case there is a twist. I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
2
votes
1answer
1k views

All methods of making iptables persist are not working

I set rules in iptables a few months back and used iptables-persistent to make the rules persist through reboot. I just updated my rules and am trying to make them persist but nothing is working they ...
-2
votes
1answer
292 views

Nginx force https only for index page

What's the best way to set up nginx conf to force https on the index.php page only and every other page be forced to http. thanks
0
votes
1answer
559 views

rSyslog - Rule for all (UDP) remote massages

Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems) So for example I would do something like this ...
0
votes
1answer
189 views

Nginx rules conversion

I have these htaccess rules: <IfModule mod_rewrite.c> <IfModule mod_negotiation.c> Options -MultiViews </IfModule> RewriteEngine On # Redirect Trailing Slashes... RewriteRule ^...
2
votes
1answer
233 views

how to configure ipaddress filters with system-config-firewall

The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule: -A INPUT -m state -...
0
votes
1answer
2k views

ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working... I already tried the following configurations (I know that some of them are depreciated but it's ...
-3
votes
1answer
103 views

Linux firewall packet handling

When a client communicates with a the server via HTTP, for example, there are many packets going in both directions. It means from the client to the server and vice versa. I would like to ask how ...
0
votes
0answers
403 views

Anti-Affinity Rules not Enabling in vCenter 6.0

Can anyone please help. I am building a new vCenter with 3 hosts, all running VMWare ESXi 6.0. I currently have about 16-18 VMs created. I have been able to create a number of Affinity and Anti-...
1
vote
0answers
305 views

rsyslog parsing logs with liblognorm

I'm trying to use such .rb file to parse logs: version=2 rule=:%Server:char-to:\t%\t%stamp:char-to:\t%\t%ip:ipv4%\t%Site:char-to:\t%\t%BID:char-to:\t%\t%SID:char-to:\t%\t%LD:char-to:\t%\t%UserID:...
0
votes
1answer
46 views

Transport rule disclaimer in new emails before sending

I have created a transport rule in exchange 2010 so attach disclaimers to emails. Is it possible to make this disclaimers visible in the newly created email before it is sent?
0
votes
2answers
1k views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
1answer
375 views

Adding signatures to emails via transport rule in exchange management console

I am trying to setup a transport rule in exchange management console which creates a signature at the end of a users emails. This seems to work. The problem however, is that the signature gets added ...
1
vote
1answer
3k views

SecRuleEngine Off not working on a single domain in virtual host

I have modSecurity installed and working on a server with multiple hosts and I want to disable some rules for one host only. This is what is what I put in the virtual host file: <IfModule ...
3
votes
2answers
189 views

Internet facing Hub Transport Exchange server with Internet restricted users and a Canon Copier

This is a rather convoluted problem but I hope that someone out there has experienced a similar situation. Here are the facts of what is happening: We have a single Exchange 2010 server that is ...
-2
votes
1answer
50 views

Creating subfolder for sendmail user [closed]

We use sendmail for automated email alerts such as info@compnayname.com or alerts@companyname.com. It's a simple sendmail configuration where these emails are created and then an alias is used to ...