Questions tagged [whitelist]
The whitelist tag has no usage guidance.
152
questions
0
votes
1
answer
75
views
Allow IPs per domain basis - solution verification
Background
I have 2 domains. I need to allow certain IP addresses as follows:
a.domain.io - all IPs allowed
b.domain.io - only IP 1.2.3.4 is allowed
Proposed solution
I am not an infrastructure ...
- 133
0
votes
1
answer
765
views
Whitelisting devices on a VPN
We have a need to set a file system instance in the cloud with strictly limited access. This has to be on Azure because of client demands. Restricting by IP address won't achieve what we need alone, ...
- 424
1
vote
2
answers
3k
views
Is it possible to use wildcards when blocking sub-domains on a Zimbra server (postfix)
I have a zimbra 8.7.11 community edition server running on Ubuntu 14.04.5 LTS.
Sometimes, individual SMTP servers from very large domains, such as yahoo.com or hotmail.com get listed in DNS RBLs.
I ...
2
votes
1
answer
3k
views
Apache2 mod_proxy - URL whitelisting
I'm trying to configure apache (2.4.18) on ubuntu 16.04 as a forward proxy to allow workstations on a couple of subnets to access a selection websites on the internet.
I have managed to configure ...
2
votes
2
answers
5k
views
Nginx Rate Limiting With CloudFlare
I want to have a Rate Limiting code with the following options:
I'm using CloudFlare, so I want it to look for the real IP address.
I want to have a whitelist option
I want to make a file with a list ...
- 183
0
votes
1
answer
1k
views
IP white list for docker containers with iptables and ipset
I want to restrict access to docker container ports just from specified IPs.
I set up iptables rules with ipset.
I have exposed the port 8888. The requests from port 8888 are forwarded to simple ...
- 101
0
votes
1
answer
857
views
IP on postfix whitelist is still blocked
Because an specific IP is often von a black list provider I have to put this IP on a whitelist because there are too many false-positives.
I configured it some time ago and I am a Windows ...
4
votes
1
answer
3k
views
Nginx location blocks don't apply to .php files inside them?
So to help prevent brute force attacks against my phpmyadmin install I've configured nginx to require HTTP Basic Auth (extra username and password) and then the requests need to come from a ...
user353498
0
votes
1
answer
383
views
IIS IP Whitelist based on subdomain
Is there a way I could enable IP whitelisting based on subdomain.
If my root domain is example.com, is there a provision to whitelist IPaddress1 for subdomain domain1.example.com
Root Domain
example....
- 185
3
votes
1
answer
34k
views
How wildcards works in Squid whitelisting configuration?
I'm a developer, not a sysadmin but I have the task to maintain a file which is basically a list of domains to whitelist. This file is used in the Squid caching proxy. The content of the file looks ...
- 179
1
vote
0
answers
722
views
Whitelist WeTransfer in Spamassassin
trying to whitelist wetransfer emails in spamassassin but somehow doesn't work, conf lines:
whitelist_from_rcvd *@email.wetransfer.com wetransfer.com
whitelist_from_rcvd *=...
- 31
7
votes
1
answer
9k
views
fail2ban- How to whitelist a big list of IP address to the jail.local file
My CDN provider gives me a big list of IP to whitelist, I need to add them to the line of ignoreip = in jail.local.
The list of IP address provided is line by line with one line one IP address, but ...
- 71
0
votes
0
answers
387
views
How to block an IP for a specific site on a server with multiple sites
There's something hitting a server I'm looking at a rapid rate and it's taking the site down. It's doing ...
POST /index.php/api/v2_soap/ HTTP/1.1, host: dev.mysite.com
I'd like to block all IPs to ...
- 125
2
votes
0
answers
283
views
Restricting an API hosted on heroku to only be able to talk to other heroku instances
I have two apps. One of them talks to the world, but needs some data from an internal API we host elsewhere (on heroku).
I was thinking about security. Currently, we have token authorization working ...
- 21
0
votes
1
answer
831
views
How to allow only some IPs for the root of the website and all IPs for specific subset of URIs?
I have a website which is protected by Allow from IP filter but there is one specific subset of URLs which I would like to be open for everyone.
dev.someweb.com should be available only from specific ...
- 231
-2
votes
1
answer
4k
views
BlackList and WhiteList with windows server 2012r2 in Domain?
I'm trying to create Blacklist and Whitelist which dissallow or allow users in my domain installing certain softwares, programs.
I just create a GPO in Company A OU, didn't modify anything.
When I ...
- 101
0
votes
1
answer
666
views
Squid - Whitelist a perticular Git Repo
This is how my proxy_whitelist.config file looks like;
.ubuntu.com
.redhat.com
It is working fine.
I need to allow my users access to a perticular Git Repo.
I tried the following
.github.com/...
- 109
3
votes
1
answer
8k
views
Postgrey whitelist and log questions
I install Postfix 2.6.6 on Centos 6
1) /etc/postfix/postgrey_whitelist_clients.local is
#Clients that should not be greylisted. See postgrey(8).
senderDomain.digital
Restarted postgrey but ...
- 233
0
votes
1
answer
852
views
NAT firewall, auto-add to whitelist triggered by DNS lookup? [closed]
I am interested in setting up a firewall. This is going to include your usual NAT, with port-forwarding for incoming connections.
However I want the outgoing connections to use a whitelist of ...
- 2,273
1
vote
2
answers
496
views
IP based link unreachable only from my VPS IP
I have my own windows VPS with IP address 182.XXX.XX.XXX, i have ip based link http://182.XXX.XXX.XX:8080/EnterpriseUi/pushAction/OTM%3D.html?username=asd&password=asd&from=asd&to=...
- 117
4
votes
1
answer
4k
views
Problems whitelisting senders in Amavis-new
I've a CentOS6 server with Amavis 2.9.1 + Postfix 2.6.6 + clamav 0.99 that I use as mail relay (aka mail gateway), with network set as follow:
eth0 (10.10.132.104) as external inteface
eth1 (10.10.133....
- 135
0
votes
1
answer
2k
views
rkhunter - deleted files - whitelist issues
I am working to secure a fresh Debian LAMP deployment and decided to include rkhunter (v1.4.2) in my security solution.
I have run it using the following options:
rkhunter -c --enable all --disable ...
- 13
0
votes
1
answer
169
views
Let OS X ScreenSharing accept incoming connections only from a list of trusted IPs [closed]
As a security measure, is it possible to set up screen sharing on a remote Mac to accept connections only from a given list of IP addresses?
(Of course I could set up a firewall to allow traffic on ...
- 149
0
votes
1
answer
687
views
Modsecurity Whitelist and keep logging
I am white listing a tag and I am curious if there is a way to white list this and keep the logging to this at the same time.
SecRuleUpdateTargetByTag "OWASP_CRS/WEB_ATTACK/SQL_INJECTION" !ARGS:/^...
- 217
1
vote
2
answers
2k
views
Modsecurity Ignore/Whitelist IP
I have looked around on the net and have seen many common answers for this , however, none of them are working.
I am trying to use this to ignore whenever our scans kick off in the morning.
SecRule ...
- 217
0
votes
0
answers
216
views
Modsecurity: How can I consolidate all SecRules to ignore aparameter
How can I consolidate all or any secrule to ignore a parameter with modsecurity?
I have a form that will always flag as XSS, unfortunately, my rule list is getting rather large as the site grows.
I ...
- 217
4
votes
1
answer
9k
views
Protecting a location by IP while applying basic auth everywhere else
I want to achieve the following results:
Apply basic authentication to ANY location, file, path
Remove basic authentication for an IP/CIDR range whitelist
Prevent ALL access to a specific directory, ...
- 145
1
vote
1
answer
1k
views
How to deny requests that contains a certain header and not coming from whitelisted IPs in nginx?
I would like to double protect an application that uses a custom header to authorize some critical views. Since those calls should only originate from some well-known IPs, I would like to block ...
- 288
4
votes
2
answers
2k
views
EC2 Security Group, restrict inbound access by hostname
I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point.
In the EC2 security group console I can only ...
- 183
0
votes
2
answers
1k
views
Locking down Azure Portal
My company does not want any staff to have access to our corporate Azure account from outside of our offices.
So, is it possible to lock down the Azure Portal? Preferably by IP whitelist.
I can find ...
- 199
0
votes
1
answer
147
views
Deny all kind of access except for ip-range
Hi I'm setting up a little 2012R2 network.
Right now I want to setup an DC and connect a few windows machines with it.
It's running virtualisied on my root server and unfortunatly I can't put it ...
- 109
5
votes
1
answer
3k
views
Assign static IP by MAC address on openVPN
Our business is currently running a VPN using OpenVPN on a server we host ourselves.
We have a need to lock down our internal network for client reasons - so the desired outcome is that only ...
- 424
0
votes
1
answer
3k
views
WS2012 RDP IP-whitelist not working
I'm running Windows Server 2012 with newest updates etc. We've at all times restricted our RDP with a whitelist with IP in the Scope properties of the Remote Desktop - User-mode rule inside the ...
- 5
2
votes
1
answer
1k
views
Using a whitelist too large for an AWS VPC Security Group
I have a large list of IPs I need to whitelist for a VPC instance. I've added as many ranges as possible to the security group until I ran out of available rules. I'm adding rules for HTTP and HTTPS ...
- 123
8
votes
1
answer
5k
views
How Does DNSWL work? How can I gain better trust? [closed]
How does DNSWL work? It's clear to me when someone report a spam, but how can I gain a higher score/trust?
Do some companies report "good" servers? Or will the score go up with time without reporting ...
- 575
0
votes
0
answers
703
views
Simple IPtables Script for Whitelisting (Amazon Endpoints)
I'm attempting to lockdown an Amazon EC2 instance which has a single open port for Amazon SNS. I can't use security groups to restrict the port as the IP is forever changing, so it must be open to all ...
- 65
1
vote
0
answers
2k
views
Pulling docker images from behind whitelisted proxy
I'm attempting to deploy my application using docker on a corporate AWS instance that sits behind a http proxy. I have installed docker and whitelisted the base image pull address.
However when I ...
- 111
1
vote
1
answer
164
views
ip range whitelist error
I need to whitelist an ip range for our load testing with Loadimpact. They have given us an ip list with ranges listed as:
54.80.0.0/13 (54.80.0.0 – 54.87.255.255)
https://forums.aws.amazon.com/ann....
- 111
6
votes
2
answers
4k
views
How to blacklist or whitelist lots or few ip ranges with ipset and iptables + fail2ban
EDIT:
It's astonishing how the urge to find a solution sometimes is sufficient to slowly but steadily lead one towards a solution. Also, the more often I reread my question in order to clarify it, I ...
-4
votes
1
answer
52
views
Preventing operating systems from being installed on a server [closed]
Is it possible to blacklist certain operating systems from being installed on a server?
Example scenarios:
1) There is an existing physical server, with no operating system. Is there a way to block ...
5
votes
1
answer
18k
views
Whitelist Elastic Load Balancer based on IP [closed]
I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS ...
- 243
1
vote
2
answers
3k
views
AWS Elastic Load Balancer : white list only my IP
My objective:
To make my AWS Elastic Load Balancer hittable by only traffic from my ip.
What I have tried:
created a security group in EC2 security groups
set an inbound rule that allows all ...
- 123
0
votes
2
answers
13k
views
How to use pfSense as a firewall in order to assign url whitelists to IP groups
In a corporate network without DHCP, the temporary solution to whitelist a couple of useful sites is to change the hosts file under Windows/System32/drivers/etc/ but since modern sites tend to change ...
user224090
3
votes
1
answer
3k
views
Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1 [closed]
mod_security with custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8
Whitelist rule:
SecRule REMOTE_ADDR "^10\.10\.10\.10" phase:1,nolog,allow,ctl:ruleEngine=Off,id:104008
...
- 263
0
votes
1
answer
568
views
How to route an IP Whitelist to one VM and all other to a second VM on proxmox?
Is it possible on linux to have a whitelist of IP's that are allowed to reach a specific VM on the internal NAT? eg (public ip (proxmox) --> My VM for whitelisted IP's (192.168.0.1)), and if the ...
- 289
0
votes
0
answers
959
views
How do I create a firewalld whitelist?
I've upgraded to CentOS7, with which comes firewalld instead of iptables. How do I configure firewalld to block all except a whitelist of http traffic? I'd like to leave all other services enabled for ...
- 284
4
votes
2
answers
3k
views
HAProxy - Will HAProxy automatically reload list files?
I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy.
So if HAProxy loads whitelists like this.
acl whitelist src -f /path/to/ips....
- 41
-1
votes
1
answer
547
views
nginx special directory whitelist extension
How can i set white list extension for special directory for my virtual host.
I have bower installation of my webapp and i install many bower component into bower_components directiry of root of ...
1
vote
1
answer
2k
views
How to setup intermediate SMTP mail server / relay to filter outgoing emails
I want to block all outgoing emails except to few whitelisted domains. what are the best ways to go about it?
Can I put an intermediate Intranet server which will do filtering based on whitelist and ...
- 21
4
votes
1
answer
21k
views
How would I create a IP whitelist for tomcat?
I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only.
I understand this is normally the job of the firewall but in this ...
- 249