Questions tagged [rules]
The rules tag has no usage guidance.
137
questions
0
votes
0
answers
16
views
Modsecurity Nginx breaking Wordpress Woocommerce checkout page. Can't find working rule exclusions
I am running an Ubuntu 20.04 based LEMP server on a Raspberry Pi 4.
I am working on a Wordpress Woocommerce website at https://www.mcmo.is. Currently on iOS using Safari or Google Chrome, I can't get ...
- 93
1
vote
2
answers
46
views
Exchange Transport Rule to block combination of recipients?
Is it possible to create an ETR that blocks certain combinations of recipients? Imagine I have two customers in different domains with similar email addresses. I want to prevent sending to recipient ...
- 156
0
votes
0
answers
22
views
Disable or Remove Local Firewall Policies
We recently had a few VM's provisioned but I didn't realize firewall settings were baked into the local policies, see below. These are Windows 2019 instances. A lot of the rules set are for services ...
- 668
0
votes
0
answers
55
views
Exchange 365 rule to block messages that contain any javascript
How can I add a rule that blocks any message with any explicit (script tag) or implicit javascript code (e.g. onclick="....")?
I know Exchange online has a rule to block any executable ...
- 11
0
votes
0
answers
286
views
IIS URL Rewrite rules to redirect domain suffix (path) to different ports on the same Virtual Machine
I've made an A-record dev.ourcompany.com, pointing to the server IP-address
Installed ARR Routing and enabled Proxy
Installed URL Rewrite and made the following Rules: (screenshot with IIS config)
&...
- 1
1
vote
1
answer
1k
views
htaccess, block access a url with parameters
If I want to block access to example.com/path/?xxxx (xxxx is variable), but allow access to example.com/path/, how should I write it in my .htaccess?
- 11
0
votes
0
answers
28
views
Rule - Check for an email with an image tag
I hate spammers phising emails, it doesn't contain anything but an image
with in the body.
I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
- 191
0
votes
0
answers
139
views
iptables rule with network interface not working
I have problem that if in IPTABLES I insert network interface it's not woking if without network interface it's ok.
My iptables:
https://i2.paste.pics/cce26e3f680e2b...08e514f9cb.png
and if I use rule ...
- 1
0
votes
1
answer
2k
views
rewrite rules from apache to nginx
I have a problem with this... I'm using free hosting for giving a demo to my future buyers of my own cms.
The hosting is hubuhost.com, they are supporting the last version of php 8.1. The problem is ...
- 3
0
votes
1
answer
273
views
Setting sender address in Exchange 365 notifications
We are running Office 365 including Exchange.
I've set up a rule to delete messages with attachments with a certain extension, and send a notification to the recipient. This is done with two separate ...
- 13
0
votes
0
answers
31
views
URL rewriting only in main domain
I am trying to use a package to optimize my main site and when I follow the instructions it works great but it messes up all subdomains as well. Can I somehow exclude any subdomain from this location ...
0
votes
0
answers
43
views
nginx rewrite rules: Rewrite https://Frontend/backend/Api/SelectAllBranch/ to https://Backend/Api/SelectAllBranch/ or .../SelectAllBranch
I'm using this configuration to nginx proxy reverso
location /backend {
rewrite ^/backend(.*)$ $1/ break;
proxy_pass http://credentials-web-bff.cl-milugar:5000;
proxy_redirect off;
...
0
votes
1
answer
375
views
How to add a routing rule that only match "dport"?
In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following:
ip rule add from 192.168.28.2 dport 1888 lookup 123
ip ...
- 169
0
votes
0
answers
117
views
Disable URL decoding in certain urls KEMP Load Balancer
So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking ...
- 139
1
vote
2
answers
513
views
iptables hashlimit rate is not working as expected
I wrote the following firewall rule:
iptables -A INPUT -m hashlimit --hashlimit 1/hour --hashlimit-burst 3 --hashlimit-mode srcip,dstport --hashlimit-name ssh -j ACCEPT
I was expecting the burst to ...
- 15
0
votes
0
answers
73
views
NGINX point subdomain to dyanimc directory
Suppose I have a domain example.com and it is located in www/wwwroot/example. I also have created a subdomain api.example.com by creating a CNAME api pointing to example.com. For the usage purposes, I ...
user844762
0
votes
1
answer
170
views
Want to enable Windows Server firewall - how to know what ports to open
For added security, we're thinking of enabling the firewalls on our 2016 and 2019 servers. Currently, they're all behind our edge router/firewall, and every server has its firewall disabled. Sometimes,...
- 123
0
votes
1
answer
290
views
Postfix SMTP only localhost login - disable remote login
I have configured postfix + dovecot on a debain 10.
I have installed a web server to have webmail with roundcube.
I don't want anyone other than roundcube to be able to use mail services, so I'm only ...
0
votes
0
answers
30
views
How to get old bash tab completion rules back - stopping before next subdirectory
Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
- 1
0
votes
0
answers
270
views
Firewalld: how are rules of the same priority ordered?
I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority.
According to the documentation, it says that there is no guarantee that rules with the ...
0
votes
0
answers
235
views
Setup dynamic ip route via rules
I've got a setup like:
|<-->|---> server 1 <---|
clients <-| <--> proxy <-->
|<-->|---> server 2 <---|
Hope my ASCII ...
- 409
0
votes
0
answers
74
views
nginx rule for /anything to /home?p1=anthing
I am very new to nginx. So, need help.
I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
- 101
1
vote
1
answer
2k
views
iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?
For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
- 227
0
votes
1
answer
2k
views
OpenVPN Server Routing/Firewall Settings [closed]
Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)"
Long Desc: ...
- 103
0
votes
1
answer
295
views
Exchange 2010 - Moderate mails sent to Distribution Group "All employees" by sender manager
In Exchange 2010 we can moderate mails sent to a distribution list, directly from the distribution list parameters. It is the same moderators for all the senders.
This is perfect except that wen ...
- 23
0
votes
1
answer
236
views
.htaccess to nginx rules
I've read lots of threads here and in other community forums, also tried some htaccess to nginx generators, but I'm struck with this.
Thats my .htaccess
<IfModule mod_rewrite.c>
...
0
votes
1
answer
595
views
IIS: How to redirect url to another domain based on the sub domain
I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com)
We have to allow the users to access the new ...
0
votes
1
answer
595
views
Outlook forwarding in shared mailbox deletes emails
I have the following Situation which I do not understand:
Situation until now
1. I have a shared o365 mailbox "AppSupport"
Within the mailbox there is a rule prefixing the subject line with "[...
- 123
1
vote
0
answers
429
views
If statements in udev rules
Is it possible to make statements in udev rules via if, else or case?
I imagine something like:
if [ $HOSTNAME == "host1" ]
then
ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
- 135
1
vote
1
answer
2k
views
Office365: Error trying to create Inbox Rule via PowerShell
In our Office365 environment I'm trying to programmatically create rules that will move incoming messages based on the distribution list they were received as.
However, while prototyping, the ...
- 121
1
vote
1
answer
511
views
Shorewall - Allow Remote Client to Ping the Internet
My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The ...
- 81
0
votes
0
answers
87
views
Use Snort 2.9 rules for Snort 2.8.6
Unfortunately Snort doesn't release rules update 2.8.6 since 2017.
All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86.
I need to update my Snort 2.8.6 signatures.
Is there any ...
0
votes
0
answers
52
views
Add rule in .htacces only if domain name begins with <regular-expression>
I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-".
I have this:
#!/...
0
votes
1
answer
952
views
Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)
We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering.
One user consistently has SCL level 5 tagged e-...
- 183
0
votes
2
answers
19k
views
pfSense allow ping only from 1 IP address
We are a dutch company with an office in the USA.
This office has an pfSense firewall device with the 182.12.12.12 IP address .
In the Netherlands' office we have an IP address like this: 100.12.10....
0
votes
2
answers
2k
views
How to make Sendmail add an evelope recipient(s) header to all inbound email messages?
Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
- 548
1
vote
1
answer
3k
views
Office 365 Exchange automatically delete deleted items
How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
- 125
0
votes
2
answers
3k
views
Skipping rules in iptables
Imagine that I have 3 rules in iptables:
Check if IP is whitelisted in ipset, then accept it.
Check if user tries connect to port 22, then drop it.
Check if user tries connect to port 80, then accept ...
- 277
1
vote
1
answer
3k
views
Cannot set GeoIP rules in iptables
I try to add this rule:
iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP
I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User
But it doesn't work,...
- 277
1
vote
2
answers
5k
views
Performance of iptables
I would like to ask you what is performance of iptables.
Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule.
I don't know ...
- 277
1
vote
1
answer
2k
views
Slow rules inserting in UFW
I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line:
while read line; do sudo ufw insert 1 deny from $line; done < ...
- 277
0
votes
1
answer
311
views
Nginx Rewrite Rules - multi-location PHP
One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php.
...
- 11
0
votes
1
answer
48
views
auditd cache activity filtering?
Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
- 11
0
votes
1
answer
274
views
Right network interface autodetect and get dhcp while boot
While preparing the mini forensic system I hung on a problem:
Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
- 253
3
votes
0
answers
3k
views
Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?
I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24.
For the moment I tried with firewall-...
- 31
2
votes
1
answer
585
views
Overwritten auditd rules in PCI DSS environement
I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS".
When I was checkin the rules applied on /etc/audit/...
- 322
0
votes
1
answer
2k
views
Exchange 2010 HUB Transport Rule not working
We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2.
I'm having problems with configuring a hub transport rule.
The purpose of the rule is to block all emails that are coming ...
- 1
0
votes
1
answer
430
views
How to secure internet access to go only via captive portal rules?
I have set up a pfSense Captive portal service witch blocks access for unauthorized users. Generally, without CP enabled, packets can pass away with no restriction.
The thing I want is to set the ...
- 163
0
votes
1
answer
1k
views
How to set up nested acl rules in HAProxy?
I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
- 249
2
votes
1
answer
4k
views
Nginx reverse proxy trailing slash
This question is already answered multiple times but in my case there is a twist.
I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
- 123