9
votes
Allow a certain URL path with Squid
For anyone else like me that stumbles across this post looking for an answer. The reason is that squid can't see the full URL for HTTPS requests, only the domain.
You can do a url_regex only for ...
3
votes
Allow a certain URL path with Squid
it's described here;
http://wiki.squid-cache.org/SquidFaq/SquidAcl
My current setup is like this;
acl special_client src 10.1.255.93
acl special_url url_regex ^http://ppa.launchpad.net/adiscon/v8-...
2
votes
Apache access.log flood with GET ...HTTP/1.1" requests
By looking at The logs you provide request URI. and UA are same in all requests and it's always better to block on basis of common attack vector
So make block conditions using
URI AND UA and other ...
2
votes
Separate Nginx access log file for certain requests only
When I came upon this post I was looking for a way to send AWS ELB healthcheck logs to a separate file as they were clogging up access.log. I was never able to get access_log to work with if inside a ...
2
votes
Accepted
What firewall settings need to be used to block Microsoft Telemetry (spyware)?
You can block
vortex.data.microsoft.com
tempuri.org
You can see that's what they're communicating to in the client-side telemetry with mssql-cli, and vscode-extension-telemtry. And, for SQL Server, ...
1
vote
Accepted
Alter database blocked by -2
Turns out it's a bug in sql server 2016 and java applications:
https://support.microsoft.com/en-us/help/3145492/fix-xa-transactions-aren-t-cleaned-when-you-exit-a-java-application-in
Trace flag has ...
1
vote
how to disable a spcific cgi page in apache?
If you have a certain site under a different virtual host in your sites-enabled you can try adding this to the site where you don't want php:
php_flag engine off
1
vote
Accepted
UFW doesn't block the mongodb port
It is possible that traffic from localhost is not affected by ufw.
You might try to add from 127.0.0.1 to your rule and see if that canges anything.
Else, I would recommend to block that port ...
1
vote
Meraki blocking js and css from good sites that use Cloudfront.net
We are having the same problem. I had to whitelist cloudfront in the Meraki MX console.
1
vote
Squid Not Blocking SSL HTTPS Properly
As the youtube you try to block is in HTTPS, you have a problem. The proxy don't decapsulate the HTTPS to know the URL and the content, so, it is able to drop the connection.
To solve your problem, ...
1
vote
Accepted
is it possible to block a certain facebook or twitter account via firewall or proxy?
It is possible to block https sites on a URL-by-URL basis, but to do this you must use SSL Inspection (often called HTTPS inspection, or Man-in-the-middle / MitM).
Many proxies support this, it has a ...
1
vote
Accepted
Watchguard blocking ports
The order of the firewall rules/policies that you have added is important because they are matched in order. For example, if there is an allow rule for all on top, it will get matched first and the ...
1
vote
Allow a certain URL path with Squid
I think you're looking for something like this:
http_access allow good
http_access deny bad !good
Because actually the good regexp matches the bad regexp as well so you need to use the AND connector ...
1
vote
Apache not serving static content concurrently
Its been a long time since this question was asked, but I was able to solve it by closing the session before the end of script execution.
I had a session_start() in my header, and it was not closed. ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
blocking × 126linux × 13
firewall × 13
ip × 11
apache-2.2 × 10
iptables × 10
proxy × 9
port × 8
nginx × 7
security × 7
squid × 6
windows × 5
php × 5
ip-blocking × 5
ubuntu × 4
mysql × 4
router × 4
website × 4
networking × 3
windows-server-2008 × 3
ssh × 3
apache-2.4 × 3
sql-server × 3
.htaccess × 3
http × 3