Skip to main content

Questions tagged [rules]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
63 views

How to reliably route traffic for specific websites over different gateways in OPNsense?

I have specific websites I want going out through WAN_DHCP, and all other traffic going out through Mullvad_Wireguard. I can get it working unreliably, but if the host name does not resolve to the ip ...
ZeroPhase's user avatar
  • 101
0 votes
0 answers
22 views

unknown values are added to iptables

New rules are being added to the iptables firewall from an unknown source. I was doing iptables -F of mangle, nat, filter and a minute later new rules appeared. I did iptables-restore and a minute ...
vanja109's user avatar
0 votes
1 answer
70 views

pFsense : A rule apply on user account

I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine. Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
Yaegaki2's user avatar
0 votes
0 answers
31 views

libmodsecurity + owasp crs + nginx: regex for hyphen in name of a POST parameter in custom exclude rule

a paranoia_level = 3 of modsecurity forbids non-printable characters to be uploaded with POST payloads (application/x-www-form-urlencoded) in phase 2 using rule 920272 of owasp crs version 3.3.4 But, ...
mpr's user avatar
  • 11
2 votes
2 answers
463 views

Exchange Transport Rule to block combination of recipients?

Is it possible to create an ETR that blocks certain combinations of recipients? Imagine I have two customers in different domains with similar email addresses. I want to prevent sending to recipient ...
bendodge's user avatar
  • 166
0 votes
0 answers
236 views

Exchange 365 rule to block messages that contain any javascript

How can I add a rule that blocks any message with any explicit (script tag) or implicit javascript code (e.g. onclick="....")? I know Exchange online has a rule to block any executable ...
Ali Sahin's user avatar
1 vote
1 answer
4k views

htaccess, block access a url with parameters

If I want to block access to example.com/path/?xxxx (xxxx is variable), but allow access to example.com/path/, how should I write it in my .htaccess?
Sanata's user avatar
  • 11
0 votes
0 answers
47 views

Rule - Check for an email with an image tag

I hate spammers phising emails, it doesn't contain anything but an image with in the body. I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
code-8's user avatar
  • 191
1 vote
1 answer
3k views

rewrite rules from apache to nginx

I have a problem with this... I'm using free hosting for giving a demo to my future buyers of my own cms. The hosting is hubuhost.com, they are supporting the last version of php 8.1. The problem is ...
pok4's user avatar
  • 13
0 votes
1 answer
698 views

Setting sender address in Exchange 365 notifications

We are running Office 365 including Exchange. I've set up a rule to delete messages with attachments with a certain extension, and send a notification to the recipient. This is done with two separate ...
AristotleO's user avatar
0 votes
0 answers
32 views

URL rewriting only in main domain

I am trying to use a package to optimize my main site and when I follow the instructions it works great but it messes up all subdomains as well. Can I somehow exclude any subdomain from this location ...
GDrakakis's user avatar
0 votes
0 answers
49 views

nginx rewrite rules: Rewrite https://Frontend/backend/Api/SelectAllBranch/ to https://Backend/Api/SelectAllBranch/ or .../SelectAllBranch

I'm using this configuration to nginx proxy reverso location /backend { rewrite ^/backend(.*)$ $1/ break; proxy_pass http://credentials-web-bff.cl-milugar:5000; proxy_redirect off; ...
Leopoldo Vasquez's user avatar
0 votes
1 answer
908 views

How to add a routing rule that only match "dport"?

In my OpenWrt box, I want to route only a specific protocol(tcp:1888) to a tun interface only for one PC(192.168.28.2), so I do as following: ip rule add from 192.168.28.2 dport 1888 lookup 123 ip ...
Leon's user avatar
  • 179
0 votes
0 answers
162 views

Disable URL decoding in certain urls KEMP Load Balancer

So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking ...
DeadSec's user avatar
  • 139
1 vote
2 answers
905 views

iptables hashlimit rate is not working as expected

I wrote the following firewall rule: iptables -A INPUT -m hashlimit --hashlimit 1/hour --hashlimit-burst 3 --hashlimit-mode srcip,dstport --hashlimit-name ssh -j ACCEPT I was expecting the burst to ...
Harry's user avatar
  • 15
0 votes
0 answers
99 views

NGINX point subdomain to dyanimc directory

Suppose I have a domain example.com and it is located in www/wwwroot/example. I also have created a subdomain api.example.com by creating a CNAME api pointing to example.com. For the usage purposes, I ...
user avatar
0 votes
1 answer
263 views

Want to enable Windows Server firewall - how to know what ports to open

For added security, we're thinking of enabling the firewalls on our 2016 and 2019 servers. Currently, they're all behind our edge router/firewall, and every server has its firewall disabled. Sometimes,...
00fruX's user avatar
  • 123
0 votes
1 answer
655 views

Postfix SMTP only localhost login - disable remote login

I have configured postfix + dovecot on a debain 10. I have installed a web server to have webmail with roundcube. I don't want anyone other than roundcube to be able to use mail services, so I'm only ...
user1814720's user avatar
0 votes
0 answers
53 views

How to get old bash tab completion rules back - stopping before next subdirectory

Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
flups's user avatar
  • 1
1 vote
0 answers
726 views

Firewalld: how are rules of the same priority ordered?

I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority. According to the documentation, it says that there is no guarantee that rules with the ...
ATrashInTheWorld's user avatar
0 votes
0 answers
358 views

Setup dynamic ip route via rules

I've got a setup like: |<-->|---> server 1 <---| clients <-| <--> proxy <--> |<-->|---> server 2 <---| Hope my ASCII ...
Alfred Balle's user avatar
0 votes
0 answers
78 views

nginx rule for /anything to /home?p1=anthing

I am very new to nginx. So, need help. I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
ghetal's user avatar
  • 101
1 vote
1 answer
3k views

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters ...
Johnny Utahh's user avatar
0 votes
1 answer
2k views

OpenVPN Server Routing/Firewall Settings [closed]

Short Desc: Connecting Rasp pi 3 as client to data center dedicated server for pulling backups over rsync. Getting "ERROR: Cannot ioctl TUNSETIFF tun0: Device or resource busy (errno=16)" Long Desc: ...
Justin C's user avatar
  • 103
0 votes
1 answer
347 views

Exchange 2010 - Moderate mails sent to Distribution Group "All employees" by sender manager

In Exchange 2010 we can moderate mails sent to a distribution list, directly from the distribution list parameters. It is the same moderators for all the senders. This is perfect except that wen ...
Philipili's user avatar
0 votes
1 answer
268 views

.htaccess to nginx rules

I've read lots of threads here and in other community forums, also tried some htaccess to nginx generators, but I'm struck with this. Thats my .htaccess <IfModule mod_rewrite.c> ...
Dereckkkk's user avatar
0 votes
1 answer
654 views

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new ...
JansiRajkumar Thangapandi's user avatar
0 votes
1 answer
856 views

Outlook forwarding in shared mailbox deletes emails

I have the following Situation which I do not understand: Situation until now 1. I have a shared o365 mailbox "AppSupport" Within the mailbox there is a rule prefixing the subject line with "[...
Julian Bechtold's user avatar
1 vote
0 answers
608 views

If statements in udev rules

Is it possible to make statements in udev rules via if, else or case? I imagine something like: if [ $HOSTNAME == "host1" ] then ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
Nico's user avatar
  • 135
1 vote
1 answer
2k views

Office365: Error trying to create Inbox Rule via PowerShell

In our Office365 environment I'm trying to programmatically create rules that will move incoming messages based on the distribution list they were received as. However, while prototyping, the ...
Oliver Giesen's user avatar
1 vote
1 answer
698 views

Shorewall - Allow Remote Client to Ping the Internet

My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The ...
alyssaeliyah's user avatar
0 votes
0 answers
102 views

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any ...
Peeter Johnson's user avatar
0 votes
0 answers
69 views

Add rule in .htacces only if domain name begins with <regular-expression>

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have this: #!/...
Ricardo Gamarra's user avatar
0 votes
1 answer
1k views

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-...
user66001's user avatar
  • 222
0 votes
2 answers
20k views

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10....
klaashansen123's user avatar
0 votes
2 answers
2k views

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question ...
Binarus's user avatar
  • 588
1 vote
1 answer
3k views

Office 365 Exchange automatically delete deleted items

How would I automatically delete email older than one week in deleted items folder? I have access to the mailbox through OWA. Would this be done using a Rule, Retention Policy or Archiving? Setting ...
C1TonyB's user avatar
  • 125
0 votes
2 answers
3k views

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept ...
tomsk's user avatar
  • 297
1 vote
1 answer
3k views

Cannot set GeoIP rules in iptables

I try to add this rule: iptables -A INPUT -m geoip ! --src-cc CZ,SK -j DROP I set GeoIP support according to this answer: Ubuntu IPTables allow only allow 1 country | Super User But it doesn't work,...
tomsk's user avatar
  • 297
1 vote
2 answers
6k views

Performance of iptables

I would like to ask you what is performance of iptables. Let's say that I whitelist and blacklist some IP addresses, I block about 10 000+ IP addresses, so every IP is like new rule. I don't know ...
tomsk's user avatar
  • 297
2 votes
1 answer
2k views

Slow rules inserting in UFW

I need to block about 10 000 IP addresses in my firewall, I have all IP addresses in file, so I run this command from command line: while read line; do sudo ufw insert 1 deny from $line; done < ...
tomsk's user avatar
  • 297
0 votes
1 answer
329 views

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. ...
PBX's user avatar
  • 11
0 votes
1 answer
61 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
Mark M's user avatar
  • 11
0 votes
1 answer
333 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
schweik's user avatar
  • 263
3 votes
0 answers
4k views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
m0ll3art's user avatar
2 votes
1 answer
672 views

Overwritten auditd rules in PCI DSS environement

I'm setting up a PCI DSS environment and I'm facing the next problem. When installing de OS (CentOS 7.3 Minimal) I've choosen the profile "PCI DSS". When I was checkin the rules applied on /etc/audit/...
Abel's user avatar
  • 322
0 votes
1 answer
2k views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
Alex.T's user avatar
  • 1
0 votes
1 answer
1k views

How to set up nested acl rules in HAProxy?

I serve multiple services from my domain using the same HAProxy instance, at domain.com/s1/ and domain.com/s2/ . I would like to do some operations (including ACL matching) only when certain ...
Animesh's user avatar
  • 249
2 votes
1 answer
5k views

Nginx reverse proxy trailing slash

This question is already answered multiple times but in my case there is a twist. I am having a node app which is running on port 3000. I am using nginx to reverse proxy. Now the application only ...
Minato Namikaze's user avatar
3 votes
1 answer
3k views

All methods of making iptables persist are not working

I set rules in iptables a few months back and used iptables-persistent to make the rules persist through reboot. I just updated my rules and am trying to make them persist but nothing is working they ...
Aaron Martin's user avatar