Questions tagged [rules]
The rules tag has no usage guidance.
46
questions with no upvoted or accepted answers
4
votes
1
answer
4k
views
How do iptables work with NFQ in terms of traffic shaping in snort?
I'm trying to understand how iptables and NFQ work together with snort.
The reason that I ask this is because from what I understand snort can be set to IPS via NFQ but if you have iptables there ...
3
votes
0
answers
4k
views
Blocking ALL outgoing traffic Using firewalld to dedicated network subnets?
I have several RHEL7/CentOS7 servers on which I need to block all OUTGOING traffic to dedicated machines or dedicated network subnets e.g. CIDR 168.192.10.0/24.
For the moment I tried with firewall-...
2
votes
2
answers
368
views
Exchange Transport Rule to block combination of recipients?
Is it possible to create an ETR that blocks certain combinations of recipients? Imagine I have two customers in different domains with similar email addresses. I want to prevent sending to recipient ...
2
votes
1
answer
269
views
how to configure ipaddress filters with system-config-firewall
The system is Fedora 23. The objective is to allow a specific port or range of ports access from a limited set of ip addresses. This can be done manually withe the following rule:
-A INPUT -m state -...
2
votes
1
answer
319
views
Programatically Creating Outlook Rules
I need to distribute a rule to all my users. Conditions are subject contains, from and has attachment. I didn't want to reinvent the wheel for this, so I initially tried New-InboxRule from the ...
2
votes
1
answer
1k
views
Domain based firewall outbound rules
We have a webserver (IIS) hosting some e-commerce websites. Our firewall in front of the server has a restriction on inbound and outbound traffic. The webserver makes outbound calls to payment ...
1
vote
0
answers
639
views
Firewalld: how are rules of the same priority ordered?
I've been playing with Firewalld and I was wondering about how it does to order rules with the same priority.
According to the documentation, it says that there is no guarantee that rules with the ...
1
vote
0
answers
577
views
If statements in udev rules
Is it possible to make statements in udev rules via if, else or case?
I imagine something like:
if [ $HOSTNAME == "host1" ]
then
ATTRS{idVendor}=="04a9", ATTRS{idProduct}=="", SUBSYSTEMS=="usb", ...
1
vote
0
answers
399
views
rsyslog parsing logs with liblognorm
I'm trying to use such .rb file to parse logs:
version=2
rule=:%Server:char-to:\t%\t%stamp:char-to:\t%\t%ip:ipv4%\t%Site:char-to:\t%\t%BID:char-to:\t%\t%SID:char-to:\t%\t%LD:char-to:\t%\t%UserID:...
1
vote
0
answers
105
views
PF rule for Continuity
So it looks like the Continuity on OS X 10.10 creates network interface on the fly (utun2 here) and my PF blocks it, so that I can't make/answer calls.
I'm not an admin, just use the IceFloor for PF ...
1
vote
0
answers
98
views
squid apply rules to a some users
Good day:
I have a squid 2.7 stable9 installation that works. It is connected to LDAP and the users can authenticate perfectly. I have different rules for instance to block a few websites during ...
1
vote
1
answer
75
views
Elusive Rewrite/Redirect Rule occurring for Apache2, cannot locate anywhere?
i have a server with apache2.2 hosting multiple virtualhosts, with a handful of domains containing a keyword(eg. "foo123") all being rewritten/redirected to another one of my hosted domains. all my ...
1
vote
0
answers
50
views
SunOne webMail - mail rule format
Migrating eMails off a SunOne mail server. Getting the messages (via POP3) is easy. But I also want to grab the mail rules users have configured. I don't seem to be able to find documentation about ...
0
votes
1
answer
27
views
pFsense : A rule apply on user account
I have a pFsense user account 'foo.extern'. This account can log to the server with OpenVPN. It works fine.
Now i want to make a firewall rule to allow this account only access to the IP adresse 192....
0
votes
0
answers
26
views
libmodsecurity + owasp crs + nginx: regex for hyphen in name of a POST parameter in custom exclude rule
a paranoia_level = 3 of modsecurity forbids non-printable characters to be uploaded with POST payloads (application/x-www-form-urlencoded) in phase 2 using rule 920272 of owasp crs version 3.3.4
But, ...
0
votes
0
answers
191
views
Modsecurity Nginx breaking Wordpress Woocommerce checkout page. Can't find working rule exclusions
I am running an Ubuntu 20.04 based LEMP server on a Raspberry Pi 4.
I am working on a Wordpress Woocommerce website at https://www.mcmo.is. Currently on iOS using Safari or Google Chrome, I can't get ...
0
votes
0
answers
438
views
Disable or Remove Local Firewall Policies
We recently had a few VM's provisioned but I didn't realize firewall settings were baked into the local policies, see below. These are Windows 2019 instances. A lot of the rules set are for services ...
0
votes
0
answers
195
views
Exchange 365 rule to block messages that contain any javascript
How can I add a rule that blocks any message with any explicit (script tag) or implicit javascript code (e.g. onclick="....")?
I know Exchange online has a rule to block any executable ...
0
votes
0
answers
39
views
Rule - Check for an email with an image tag
I hate spammers phising emails, it doesn't contain anything but an image
with in the body.
I'm wondering if there is a rule, I can check if the email body contains only and only <img> and no ...
0
votes
0
answers
32
views
URL rewriting only in main domain
I am trying to use a package to optimize my main site and when I follow the instructions it works great but it messes up all subdomains as well. Can I somehow exclude any subdomain from this location ...
0
votes
0
answers
46
views
nginx rewrite rules: Rewrite https://Frontend/backend/Api/SelectAllBranch/ to https://Backend/Api/SelectAllBranch/ or .../SelectAllBranch
I'm using this configuration to nginx proxy reverso
location /backend {
rewrite ^/backend(.*)$ $1/ break;
proxy_pass http://credentials-web-bff.cl-milugar:5000;
proxy_redirect off;
...
0
votes
0
answers
153
views
Disable URL decoding in certain urls KEMP Load Balancer
So I recently set up GitLab in my server and I use the kemp load balancer to reverse proxy and also manage other rules and stuff but today I noticed that the web IDE wasn't working and after looking ...
0
votes
0
answers
96
views
NGINX point subdomain to dyanimc directory
Suppose I have a domain example.com and it is located in www/wwwroot/example. I also have created a subdomain api.example.com by creating a CNAME api pointing to example.com. For the usage purposes, I ...
0
votes
0
answers
46
views
How to get old bash tab completion rules back - stopping before next subdirectory
Could anyone please confirm to me whether tab completion rules e.g. in Debian/Devuan/Ubuntu Linux have changed some time ago - and how (or from which debian package revision) I could quickly get the ...
0
votes
0
answers
328
views
Setup dynamic ip route via rules
I've got a setup like:
|<-->|---> server 1 <---|
clients <-| <--> proxy <-->
|<-->|---> server 2 <---|
Hope my ASCII ...
0
votes
0
answers
78
views
nginx rule for /anything to /home?p1=anthing
I am very new to nginx. So, need help.
I want nginx rule for any url like http://example.com/abcDEF i.e. any word after domain name should be considered as parameter to home page and thus redirect to ...
0
votes
1
answer
643
views
IIS: How to redirect url to another domain based on the sub domain
I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com)
We have to allow the users to access the new ...
0
votes
0
answers
100
views
Use Snort 2.9 rules for Snort 2.8.6
Unfortunately Snort doesn't release rules update 2.8.6 since 2017.
All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86.
I need to update my Snort 2.8.6 signatures.
Is there any ...
0
votes
0
answers
65
views
Add rule in .htacces only if domain name begins with <regular-expression>
I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-".
I have this:
#!/...
0
votes
1
answer
1k
views
Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)
We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering.
One user consistently has SCL level 5 tagged e-...
0
votes
1
answer
58
views
auditd cache activity filtering?
Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation ...
0
votes
1
answer
321
views
Right network interface autodetect and get dhcp while boot
While preparing the mini forensic system I hung on a problem:
Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find ...
0
votes
1
answer
2k
views
Exchange 2010 HUB Transport Rule not working
We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2.
I'm having problems with configuring a hub transport rule.
The purpose of the rule is to block all emails that are coming ...
0
votes
1
answer
929
views
rSyslog - Rule for all (UDP) remote massages
Is there a way to create a rsyslog rule that will process all incoming udp traffic to a different file (the same way rules are written for subsystems)
So for example I would do something like this
...
0
votes
0
answers
490
views
Anti-Affinity Rules not Enabling in vCenter 6.0
Can anyone please help. I am building a new vCenter with 3 hosts, all running VMWare ESXi 6.0.
I currently have about 16-18 VMs created.
I have been able to create a number of Affinity and Anti-...
0
votes
1
answer
63
views
Transport rule disclaimer in new emails before sending
I have created a transport rule in exchange 2010 so attach disclaimers to emails. Is it possible to make this disclaimers visible in the newly created email before it is sent?
0
votes
1
answer
428
views
Adding signatures to emails via transport rule in exchange management console
I am trying to setup a transport rule in exchange management console which creates a signature at the end of a users emails.
This seems to work. The problem however, is that the signature gets added ...
0
votes
1
answer
57
views
Iptables rules, how to allow another server IPs
I have 5 ips
1.1.1.1
1.1.1.2
1.1.1.3
1.1.1.4
1.1.1.5
i already install openvz & openvz webpanel in main ip
then create a vps with ip 1.1.1.2
i cant open 1.1.1.2, but if i disable iptables ...
0
votes
1
answer
530
views
Ejabberd returning 503 Service Unavailable when trying in-channel registration
I've put the following snippet into my ejabberd.cfg, under the modules section:
{mod_register, [
{ip_access, "my.ip.add.ress"},
%%% some default rules included ...
0
votes
1
answer
1k
views
Is it possible to write a udev rule to keep other udev rules from running?
This
http://reactivated.net/writing_udev_rules.html
says
It is important to understand that udev will not stop processing when it finds a matching rule, it will continue searching and attempt ...
0
votes
1
answer
136
views
Inbound IPTables rules based on queried domain
I have an odd situation and I'm not entirely sure if it is even possible in IPTables. If it isn't, that's fine and I can do without. If it is, fantastic, I'd love to see how to implement it.
So, my ...
0
votes
1
answer
853
views
How can I export Mdaemon filter rules
I'm now migrating my Mdaemon Mail Server to a Zimbra Server. I can export the account list, synchronize the mail data via IMAP. But I dont know how to export the IMAP filter rules of each Mdaemon ...
0
votes
1
answer
217
views
Nginx second domain rewrite rule
What im trying to do:
I have nginx running with wordpress
Now i want DOMAIN-2 to redirect to a path of DOMAIN-1
http://DOMAIN-1/Content-for-Domain-2
but not just a simple redirect, it should ...
0
votes
2
answers
100
views
apache -Directory directive - allow to serve selected pages
This syntax seems to prevent Apache from serving any pages from /var/www or subdirectories.
<Directory "/var/www">
Allow from None
Order allow,deny
</Directory>
I wantthis ...
0
votes
1
answer
1k
views
Exchange 2010 EMS New-InboxRule does not create rule for some users and create multiple rules for others
We are trying to make a rule where if a message has XXXXX in the subject then move to the Junk Folder.
I have granted my user full access rights to all mailboxes on the server.
I have confirmed I ...
0
votes
1
answer
2k
views
ModSecurity SecRule REMOTE_ADDR NOT WORKING?
I'm trying to nolog for a particular IP 10.68.***.96 and 127.0.0.1 address but it seem not working...
I already tried the following configurations (I know that some of them are depreciated but it's ...