Questions tagged [rules]

The tag has no usage guidance.

46 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
1 answer
4k views

How do iptables work with NFQ in terms of traffic shaping in snort?

I'm trying to understand how iptables and NFQ work together with snort. The reason that I ask this is because from what I understand snort can be set to IPS via NFQ but if you have iptables there ...
Danny 's user avatar
  • 41
3 votes
0 answers
4k views

Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?

I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24. For the moment I tried with firewall-...
m0ll3art's user avatar
2 votes
2 answers
368 views

Exchange Transport Rule to block combination of recipients?

Is it possible to create an ETR that blocks certain combinations of recipients? Imagine I have two customers in different domains with similar email addresses. I want to prevent sending to recipient ...
bendodge's user avatar
  • 166
2 votes
1 answer
269 views

how to configure ipaddress filters with system-config-firewall

The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule: -A INPUT -m state -...
dan sawyer's user avatar
2 votes
1 answer
319 views

Programatically Creating Outlook Rules

I need to distribute a rule to all my users. Conditions are subject contains, from and has attachment. I didn't want to reinvent the wheel for this, so I initially tried New-InboxRule from the ...
Steven's user avatar
  • 141
2 votes
1 answer
1k views

Domain based firewall outbound rules

We have a webserver (IIS) hosting some e-commerce websites. Our firewall in front of the server has a restriction on inbound and outbound traffic. The webserver makes outbound calls to payment ...
user154707's user avatar
1 vote
0 answers
639 views

Firewalld: how are rules of the same priority ordered?

I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority. According to the documentation, it says that there is no guarantee that rules with the ...
ATrashInTheWorld's user avatar
1 vote
0 answers
577 views

If statements in udev rules

Is it possible to make statements in udev rules via if, else or case? I imagine something like: if [ $HOSTNAME == "host1" ] then ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
Nico's user avatar
  • 135
1 vote
0 answers
399 views

rsyslog parsing logs with liblognorm

I'm trying to use such .rb file to parse logs: version=2 rule=:%Server:char-to:\t%\t%stamp:char-to:\t%\t%ip:ipv4%\t%Site:char-to:\t%\t%BID:char-to:\t%\t%SID:char-to:\t%\t%LD:char-to:\t%\t%UserID:...
user3069488's user avatar
1 vote
0 answers
105 views

PF rule for Continuity

So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls. I'm not an admin, just use the IceFloor for PF ...
cocoapriest's user avatar
1 vote
0 answers
98 views

squid apply rules to a some users

Good day: I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
Abel's user avatar
  • 121
1 vote
1 answer
75 views

Elusive Rewrite/Redirect Rule occurring for Apache2, cannot locate anywhere?

i have a server with apache2.2 hosting multiple virtualhosts, with a handful of domains containing a keyword(eg. "foo123") all being rewritten/redirected to another one of my hosted domains. all my ...
xVagabondx's user avatar
1 vote
0 answers
50 views

SunOne webMail - mail rule format

Migrating eMails off a SunOne mail server. Getting the messages (via POP3) is easy. But I also want to grab the mail rules users have configured. I don't seem to be able to find documentation about ...
stwissel's user avatar
  • 680
0 votes
1 answer
27 views

pFsense : A rule apply on user account

I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine. Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
Yaegaki2's user avatar
0 votes
0 answers
26 views

libmodsecurity + owasp crs + nginx: regex for hyphen in name of a POST parameter in custom exclude rule

a paranoia_level = 3 of modsecurity forbids non-printable characters to be uploaded with POST payloads (application/x-www-form-urlencoded) in phase 2 using rule 920272 of owasp crs version 3.3.4 But, ...
mpr's user avatar
  • 11
0 votes
0 answers
191 views

Modsecurity Nginx breaking Wordpress Woocommerce checkout page. Can't find working rule exclusions

I am running an Ubuntu 20.04 based LEMP server on a Raspberry Pi 4. I am working on a Wordpress Woocommerce website at https://www.mcmo.is. Currently on iOS using Safari or Google Chrome, I can't get ...
DanRan's user avatar
  • 123
0 votes
0 answers
438 views

Disable or Remove Local Firewall Policies

We recently had a few VM's provisioned but I didn't realize firewall settings were baked into the local policies, see below. These are Windows 2019 instances. A lot of the rules set are for services ...
jrd1989's user avatar
  • 688
0 votes
0 answers
195 views

Exchange 365 rule to block messages that contain any javascript

How can I add a rule that blocks any message with any explicit (script tag) or implicit javascript code (e.g. onclick="....")? I know Exchange online has a rule to block any executable ...
Ali Sahin's user avatar
0 votes
0 answers
39 views

Rule - Check for an email with an image tag

I hate spammers phising emails, it doesn't contain anything but an image with in the body. I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
code-8's user avatar
  • 191
0 votes
0 answers
32 views

URL rewriting only in main domain

I am trying to use a package to optimize my main site and when I follow the instructions it works great but it messes up all subdomains as well. Can I somehow exclude any subdomain from this location ...
GDrakakis's user avatar
0 votes
0 answers
46 views

nginx rewrite rules: Rewrite https://Frontend/backend/Api/SelectAllBranch/ to https://Backend/Api/SelectAllBranch/ or .../SelectAllBranch

I'm using this configuration to nginx proxy reverso location /backend { rewrite ^/backend(.*)$ $1/ break; proxy_pass http://credentials-web-bff.cl-milugar:5000; proxy_redirect off; ...
Leopoldo Vasquez's user avatar
0 votes
0 answers
153 views

Disable URL decoding in certain urls KEMP Load Balancer

So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking ...
DeadSec's user avatar
  • 139
0 votes
0 answers
96 views

NGINX point subdomain to dyanimc directory

Suppose I have a domain example.com and it is located in www/wwwroot/example. I also have created a subdomain api.example.com by creating a CNAME api pointing to example.com. For the usage purposes, I ...
user avatar
0 votes
0 answers
46 views

How to get old bash tab completion rules back - stopping before next subdirectory

Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
flups's user avatar
  • 1
0 votes
0 answers
328 views

Setup dynamic ip route via rules

I've got a setup like: |<-->|---> server 1 <---| clients <-| <--> proxy <--> |<-->|---> server 2 <---| Hope my ASCII ...
Alfred Balle's user avatar
0 votes
0 answers
78 views

nginx rule for /anything to /home?p1=anthing

I am very new to nginx. So, need help. I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
ghetal's user avatar
  • 101
0 votes
1 answer
643 views

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new ...
JansiRajkumar Thangapandi's user avatar
0 votes
0 answers
100 views

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any ...
Peeter Johnson's user avatar
0 votes
0 answers
65 views

Add rule in .htacces only if domain name begins with <regular-expression>

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have this: #!/...
Ricardo Gamarra's user avatar
0 votes
1 answer
1k views

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-...
user66001's user avatar
  • 213
0 votes
1 answer
58 views

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
Mark M's user avatar
  • 11
0 votes
1 answer
321 views

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
schweik's user avatar
  • 263
0 votes
1 answer
2k views

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming ...
Alex.T's user avatar
  • 1
0 votes
1 answer
929 views

rSyslog - Rule for all (UDP) remote massages

Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems) So for example I would do something like this ...
Sammy Jankis's user avatar
0 votes
0 answers
490 views

Anti-Affinity Rules not Enabling in vCenter 6.0

Can anyone please help. I am building a new vCenter with 3 hosts, all running VMWare ESXi 6.0. I currently have about 16-18 VMs created. I have been able to create a number of Affinity and Anti-...
mokins's user avatar
  • 1
0 votes
1 answer
63 views

Transport rule disclaimer in new emails before sending

I have created a transport rule in exchange 2010 so attach disclaimers to emails. Is it possible to make this disclaimers visible in the newly created email before it is sent?
oshirowanen's user avatar
0 votes
1 answer
428 views

Adding signatures to emails via transport rule in exchange management console

I am trying to setup a transport rule in exchange management console which creates a signature at the end of a users emails. This seems to work. The problem however, is that the signature gets added ...
oshirowanen's user avatar
0 votes
1 answer
57 views

Iptables rules, how to allow another server IPs

I have 5 ips 1.1.1.1 1.1.1.2 1.1.1.3 1.1.1.4 1.1.1.5 i already install openvz & openvz webpanel in main ip then create a vps with ip 1.1.1.2 i cant open 1.1.1.2, but if i disable iptables ...
michaelmore's user avatar
0 votes
1 answer
530 views

Ejabberd returning 503 Service Unavailable when trying in-channel registration

I've put the following snippet into my ejabberd.cfg, under the modules section: {mod_register, [ {ip_access, "my.ip.add.ress"}, %%% some default rules included ...
Jules's user avatar
  • 201
0 votes
1 answer
1k views

Is it possible to write a udev rule to keep other udev rules from running?

This http://reactivated.net/writing_udev_rules.html says It is important to understand that udev will not stop processing when it finds a matching rule, it will continue searching and attempt ...
Stu's user avatar
  • 2,218
0 votes
1 answer
136 views

Inbound IPTables rules based on queried domain

I have an odd situation and I'm not entirely sure if it is even possible in IPTables. If it isn't, that's fine and I can do without. If it is, fantastic, I'd love to see how to implement it. So, my ...
Mike Burroughs's user avatar
0 votes
1 answer
853 views

How can I export Mdaemon filter rules

I'm now migrating my Mdaemon Mail Server to a Zimbra Server. I can export the account list, synchronize the mail data via IMAP. But I dont know how to export the IMAP filter rules of each Mdaemon ...
Megame's user avatar
  • 1
0 votes
1 answer
217 views

Nginx second domain rewrite rule

What im trying to do: I have nginx running with wordpress Now i want DOMAIN-2 to redirect to a path of DOMAIN-1 http://DOMAIN-1/Content-for-Domain-2 but not just a simple redirect, it should ...
chillah's user avatar
  • 101
0 votes
2 answers
100 views

apache -Directory directive - allow to serve selected pages

This syntax seems to prevent Apache from serving any pages from /var/www or subdirectories. <Directory "/var/www"> Allow from None Order allow,deny </Directory> I wantthis ...
mustapha joe's user avatar
0 votes
1 answer
1k views

Exchange 2010 EMS New-InboxRule does not create rule for some users and create multiple rules for others

We are trying to make a rule where if a message has XXXXX in the subject then move to the Junk Folder. I have granted my user full access rights to all mailboxes on the server. I have confirmed I ...
Campo's user avatar
  • 1,609
0 votes
1 answer
2k views

ModSecurity SecRule REMOTE_ADDR NOT WORKING?

I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working... I already tried the following configurations (I know that some of them are depreciated but it's ...
Raphaël D's user avatar