Questions tagged [rules]

131 questions
1
vote
2 answers

iptables hashlimit rate is not working as expected

I wrote the following firewall rule: iptables -A INPUT -m hashlimit --hashlimit 1/hour --hashlimit-burst 3 --hashlimit-mode srcip,dstport --hashlimit-name ssh -j ACCEPT I was expecting the burst to be recharged by 1 after one hour but actually it…
Harry
  • 15
  • 3
1
vote
1 answer

iptables: employ DROP or REJECT rules in non-'filters' tables, namely the NAT table?

For an iptables(8) firewall that is otherwise "properly locked down" in the filter table, is there any use to employ DROP, REJECT or similar, terminating, "blocking or disabling" rules in non-filters tables, namely the NAT table (or the mangle, raw,…
Johnny Utahh
  • 207
  • 3
  • 11
0
votes
1 answer

IIS: How to redirect url to another domain based on the sub domain

I am having one website which is hosted in IIS (my.serverfault.com) and having new website which is deployed in openshift (angular.serverfault.com) We have to allow the users to access the new website from old website (reverse proxy using IIS) Ex.…
0
votes
1 answer

Outlook forwarding in shared mailbox deletes emails

I have the following Situation which I do not understand: Situation until now 1. I have a shared o365 mailbox "AppSupport" Within the mailbox there is a rule prefixing the subject line with "[AppSupport]" - this works fine After prefixing the…
0
votes
1 answer

Shorewall - Allow Remote Client to Ping the Internet

My network address is 192.168.5.0. My host machine is 192.168.5.1 and my client machine is 192.168.5.2. Currently, my client is unable to use the internet browser and even ping the internet. The client can ping the host machine in the local…
alyssaeliyah
  • 71
  • 1
  • 8
0
votes
0 answers

Use Snort 2.9 rules for Snort 2.8.6

Unfortunately Snort doesn't release rules update 2.8.6 since 2017. All customer should upgrade to 2.9. But 2.9 is X64 and my OS is Fedora X86. I need to update my Snort 2.8.6 signatures. Is there any source to get update or any solution that convert…
0
votes
0 answers

Add rule in .htacces only if domain name begins with

I have to add a rule in a server that host many sites. This rule must be added only in those .htaccess files that belongs to a site with domain beggining with "dev-" or "review-". I have…
0
votes
1 answer

Priority of hidden rules in Outlook/Exchange (2016/2010 respectively)

We have recently moved from a purely Exchange 2010 environment, to a hybrid Exchange 2010/O365 environment and now are using EOP for spam filtering. One user consistently has SCL level 5 tagged e-mails appear in his Inbox. This user also has a…
user66001
  • 185
  • 2
  • 16
0
votes
2 answers

pfSense allow ping only from 1 IP address

We are a dutch company with an office in the USA. This office has an pfSense firewall device with the 182.12.12.12 IP address . In the Netherlands' office we have an IP address like this: 100.12.10.12 Is there a way that we can set up a rule in…
klaashansen123
  • 7
  • 1
  • 1
  • 2
0
votes
2 answers

How to make Sendmail add an evelope recipient(s) header to all inbound email messages?

Disclaimer: I have read some of the questions and articles here and elsewhere which deal with Sendmail rewriting headers. I haven't found an answer to the question below because the other question mostly relate to rewriting headers (instead of…
Binarus
  • 519
  • 3
  • 15
0
votes
2 answers

Skipping rules in iptables

Imagine that I have 3 rules in iptables: Check if IP is whitelisted in ipset, then accept it. Check if user tries connect to port 22, then drop it. Check if user tries connect to port 80, then accept it. This is example (not real) of…
tomsk
  • 257
  • 4
  • 18
0
votes
1 answer

Nginx Rewrite Rules - multi-location PHP

One down, one to go! I fully understand everything that was wrong with my config before and would like to thank Cemal over at Stack Overflow once again. The /location/ is now displaying index.php. The new problem is, the rewrite rules. They are…
PBX
  • 11
  • 4
0
votes
1 answer

auditd cache activity filtering?

Can anyone suggest a strategy for filtering browser cache activity from auditable events in CentOS6. Apparently el7 has added capabilities for filtering on executables? But all of our workstation instances are still on 6. I have requirements that…
Mark M
  • 11
  • 3
0
votes
1 answer

Right network interface autodetect and get dhcp while boot

While preparing the mini forensic system I hung on a problem: Let us imagine, we prepare a usb-flash booted linux for lot of diferent workstations. While setting up the network (ipv4 dhcp) we can find more than one LAN interfaces, and someone is…
schweik
  • 253
  • 2
  • 8
0
votes
1 answer

Exchange 2010 HUB Transport Rule not working

We have an Exchange Server 2010 running on Windows Server 2010 Standard SP2. I'm having problems with configuring a hub transport rule. The purpose of the rule is to block all emails that are coming from outside the organization to the recipients of…
Alex.T
  • 1
  • 2
1 2 3
8 9