Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [whitelist]

The tag has no usage guidance.

-1
votes
0answers
20 views

How long is IP grace period in dnswl.org [on hold]

After removing IP mail server address from dnswl.org domain entry it can not be immediately added again. When trying to add it again - one gets a "1.2.3.4 has recently been deleted from our database ...
1
vote
1answer
40 views

Nginx. White-list top filter and no auth white-list and basic auth simultaneously

Can't find a way to build the next scheme. A whitelist of IPs ever allowed. Ban for most of the net. A sublist of whitelisted IPs allowed to bypass auth. A part of a local net, for example. Basic ...
0
votes
0answers
24 views

Whitelisting IPs for AWS VPC to bypass VPN

We have a AWS VPC with public and private subnets. And the OpenVPN server is running in a public subnet and its is used to connect to instances in private subnet. Now, we want to whitelist couple of ...
0
votes
1answer
54 views

Resolve specific Domain query using View in BIND9 (Forward)

I am trying to setup a whitelisted domain forwarder in my bind9 but it wasn't successfully accomplish maybe due to the configuration that I applied. A couple months ago, I did setup the same ...
1
vote
0answers
42 views

CISCO 2960-X mac filtering issue (mac Blocked even it is permitted)

I have a weird issue, I created a mac access-list with the list of all permitted mac-addresses. It is working on all except one machine, once the access list is configured on interface, the connection ...
0
votes
0answers
52 views

how can I whitelist dyndns host in mod security?

I'm using mod security with apache on Debian 8 and I'd like to add an exception for my IP. However I'm behind a dynamic IP address so it keeps changing. Is there a way to whitelist a hostname instead ...
0
votes
1answer
940 views

python get-pip.py not working behind proxy

i'm having an issue when trying to run devstack which is trying to get pip using the following command i added the verbose parameter sudo -H -E python /opt/stack/devstack/files/get-pip.py -c /opt/...
-1
votes
1answer
222 views

Whitelist domain name for speedtest.net to allow a test to run

Using a 4G Router (HUAWEI B315) with a domain name whitelist to prevent excessive data usage. It will only allow our custom API through. However when testing the router at new venues it would be ...
0
votes
1answer
2k views

Whitelisting Google Recaptcha

Barracuda Web Filter blocking the Google Recaptcha on one of our vendors sites. We have tested with an unfiltered user to verify that it's the webfilter blocking Searched for what to whitelist, the ...
-1
votes
2answers
61 views

Block a computer from all but 1 or 2 websites?

I'm setting up a computer for our machine shop that is intended for them to only get to a couple sites they may need while working. It needs to still be on our network so they can look at files saved ...
1
vote
1answer
27 views

Centralized IP whiltelist for many servers on different providers

I have many servers on different providers. On each server I have permitted ssh access to port 22 only to a whitelist of IPs. If I need to change/add an IP address I must change the configuration in ...
0
votes
0answers
9 views

How to Whitelist multiple IP on Go-daddy server/any other Server with a json code/tag?

How to Whitelist multiple IP on Go-daddy server/any other Server with a json code/tag ? I have tried with cPanel >> cPHulk, haven't found any optimal solution.
0
votes
0answers
1k views

Not receiving mails sent to a G Suite group (list)

my company uses a G Suite account and we have many Gmail users with an own domain (let's say mydomain.com) and many groups (lists) so, if someone sends an e-mail to a group, every user added in that ...
0
votes
0answers
238 views

Allow usb by device ID not by hardware ID

I just set up the local policy "Prevent installation of devices not described by other policy settings" and the policy "Allow installation of devices that match any of these device IDs". My problem: ...
0
votes
0answers
32 views

windows 10 - firewall IP based rules

I have a long list of IP ranges which I want to whitelist in windows firewall. I've found how to add a single range, but typing one range at a time will be very hard. Is there a way to import a list ...
0
votes
1answer
1k views

NginX Whitelist by IP and hostname. Otherwise HTTP auth

On Apache, we had a setup where we could have http auth for all of our dev branches unless the hostname matched our whitelist or if the visitor's IP matched our whitelist. This is what we had: ...
0
votes
1answer
2k views

Firewalld: How to whitelist just two IP-addresses, not on the same subnet

I'm running firwalld on a VPS / webserver. The public zone is active and default (and I do not want the change that). How do I allow only these two external IP-addresses to access the VPS (i.e. all ...
0
votes
1answer
173 views

Cloudflare IP range error

I need to whitelist an IP ranges 91.232.230.0/23 and 79.142.16.0/20 on CloudFlare. If I enter these IP ranges I get the error: An IP range (CIDR) must be a /16 or /24 How can I whitelist these? I've ...
0
votes
1answer
54 views

Allow IPs per domain basis - solution verification

Background I have 2 domains. I need to allow certain IP addresses as follows: a.domain.io - all IPs allowed b.domain.io - only IP 1.2.3.4 is allowed Proposed solution I am not an infrastructure ...
0
votes
1answer
263 views

Whitelisting devices on a VPN

We have a need to set a file system instance in the cloud with strictly limited access. This has to be on Azure because of client demands. Restricting by IP address won't achieve what we need alone, ...
1
vote
2answers
580 views

Is it possible to use wildcards when blocking sub-domains on a Zimbra server (postfix)

I have a zimbra 8.7.11 community edition server running on Ubuntu 14.04.5 LTS. Sometimes, individual SMTP servers from very large domains, such as yahoo.com or hotmail.com get listed in DNS RBLs. I ...
1
vote
1answer
660 views

Apache2 mod_proxy - URL whitelisting

I'm trying to configure apache (2.4.18) on ubuntu 16.04 as a forward proxy to allow workstations on a couple of subnets to access a selection websites on the internet. I have managed to configure ...
1
vote
1answer
1k views

Nginx Rate Limiting With CloudFlare

I want to have a Rate Limiting code with the following options: I'm using CloudFlare, so I want it to look for the real IP address. I want to have a whitelist option I want to make a file with a list ...
0
votes
1answer
490 views

IP white list for docker containers with iptables and ipset

I want to restrict access to docker container ports just from specified IPs. I set up iptables rules with ipset. I have exposed the port 8888. The requests from port 8888 are forwarded to simple ...
0
votes
1answer
107 views

IP on postfix whitelist is still blocked

Because an specific IP is often von a black list provider I have to put this IP on a whitelist because there are too many false-positives. I configured it some time ago and I am a Windows ...
3
votes
1answer
1k views

Nginx location blocks don't apply to .php files inside them?

So to help prevent brute force attacks against my phpmyadmin install I've configured nginx to require HTTP Basic Auth (extra username and password) and then the requests need to come from a ...
0
votes
1answer
140 views

IIS IP Whitelist based on subdomain

Is there a way I could enable IP whitelisting based on subdomain. If my root domain is example.com, is there a provision to whitelist IPaddress1 for subdomain domain1.example.com Root Domain example....
2
votes
1answer
8k views

How wildcards works in Squid whitelisting configuration?

I'm a developer, not a sysadmin but I have the task to maintain a file which is basically a list of domains to whitelist. This file is used in the Squid caching proxy. The content of the file looks ...
1
vote
0answers
249 views

Whitelist WeTransfer in Spamassassin

trying to whitelist wetransfer emails in spamassassin but somehow doesn't work, conf lines: whitelist_from_rcvd *@email.wetransfer.com wetransfer.com whitelist_from_rcvd *=...
1
vote
0answers
2k views

fail2ban- How to whitelist a big list of IP address to the jail.local file

My CDN provider gives me a big list of IP to whitelist, I need to add them to the line of ignoreip = in jail.local. The list of IP address provided is line by line with one line one IP address, but ...
0
votes
0answers
247 views

How to block an IP for a specific site on a server with multiple sites

There's something hitting a server I'm looking at a rapid rate and it's taking the site down. It's doing ... POST /index.php/api/v2_soap/ HTTP/1.1, host: dev.mysite.com I'd like to block all IPs to ...
2
votes
0answers
167 views

Restricting an API hosted on heroku to only be able to talk to other heroku instances

I have two apps. One of them talks to the world, but needs some data from an internal API we host elsewhere (on heroku). I was thinking about security. Currently, we have token authorization working ...
0
votes
1answer
429 views

How to allow only some IPs for the root of the website and all IPs for specific subset of URIs?

I have a website which is protected by Allow from IP filter but there is one specific subset of URLs which I would like to be open for everyone. dev.someweb.com should be available only from specific ...
-2
votes
1answer
2k views

BlackList and WhiteList with windows server 2012r2 in Domain?

I'm trying to create Blacklist and Whitelist which dissallow or allow users in my domain installing certain softwares, programs. I just create a GPO in Company A OU, didn't modify anything. When I ...
0
votes
1answer
270 views

Squid - Whitelist a perticular Git Repo

This is how my proxy_whitelist.config file looks like; .ubuntu.com .redhat.com It is working fine. I need to allow my users access to a perticular Git Repo. I tried the following .github.com/...
3
votes
1answer
3k views

Postgrey whitelist and log questions

I install Postfix 2.6.6 on Centos 6 1) /etc/postfix/postgrey_whitelist_clients.local is #Clients that should not be greylisted. See postgrey(8). senderDomain.digital Restarted postgrey but ...
0
votes
1answer
346 views

NAT firewall, auto-add to whitelist triggered by DNS lookup? [closed]

I am interested in setting up a firewall. This is going to include your usual NAT, with port-forwarding for incoming connections. However I want the outgoing connections to use a whitelist of ...
0
votes
0answers
38 views

Why do we add Web Server Public IP Addresses to organization's safe senders list (whitelist)?

When we use SaaS applications they suggest to include both the email relay IP address and Web Server Public IP Addresses to organization's safe senders list (white list) but when I perform couple of ...
1
vote
2answers
53 views

IP based link unreachable only from my VPS IP

I have my own windows VPS with IP address 182.XXX.XX.XXX, i have ip based link http://182.XXX.XXX.XX:8080/EnterpriseUi/pushAction/OTM%3D.html?username=asd&password=asd&from=asd&to=...
3
votes
1answer
2k views

Problems whitelisting senders in Amavis-new

I've a CentOS6 server with Amavis 2.9.1 + Postfix 2.6.6 + clamav 0.99 that I use as mail relay (aka mail gateway), with network set as follow: eth0 (10.10.132.104) as external inteface eth1 (10.10.133....
0
votes
1answer
904 views

rkhunter - deleted files - whitelist issues

I am working to secure a fresh Debian LAMP deployment and decided to include rkhunter (v1.4.2) in my security solution. I have run it using the following options: rkhunter -c --enable all --disable ...
0
votes
1answer
58 views

Let OS X ScreenSharing accept incoming connections only from a list of trusted IPs [closed]

As a security measure, is it possible to set up screen sharing on a remote Mac to accept connections only from a given list of IP addresses? (Of course I could set up a firewall to allow traffic on ...
0
votes
1answer
276 views

Modsecurity Whitelist and keep logging

I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time. SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" !ARGS:/^...
0
votes
1answer
784 views

Modsecurity Ignore/Whitelist IP

I have looked around on the net and have seen many common answers for this , however, none of them are working. I am trying to use this to ignore whenever our scans kick off in the morning. SecRule ...
0
votes
0answers
50 views

Modsecurity: How can I consolidate all SecRules to ignore aparameter

How can I consolidate all or any secrule to ignore a parameter with modsecurity? I have a form that will always flag as XSS, unfortunately, my rule list is getting rather large as the site grows. I ...
2
votes
1answer
4k views

Protecting a location by IP while applying basic auth everywhere else

I want to achieve the following results: Apply basic authentication to ANY location, file, path Remove basic authentication for an IP/CIDR range whitelist Prevent ALL access to a specific directory, ...
1
vote
1answer
496 views

How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?

I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
3
votes
2answers
970 views

EC2 Security Group, restrict inbound access by hostname

I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point. In the EC2 security group console I can only ...
0
votes
2answers
447 views

Locking down Azure Portal

My company does not want any staff to have access to our corporate Azure account from outside of our offices. So, is it possible to lock down the Azure Portal? Preferably by IP whitelist. I can find ...
0
votes
1answer
112 views

Deny all kind of access except for ip-range

Hi I'm setting up a little 2012R2 network. Right now I want to setup an DC and connect a few windows machines with it. It's running virtualisied on my root server and unfortunatly I can't put it ...