Questions tagged [whitelist]
145 questions
4
votes
2 answers
EC2 Security Group, restrict inbound access by hostname
I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point.
In the EC2 security group console I can only filter by IP/Range. This isn't adequate as PayPal say…
![](../../users/profiles/45107.webp)
jim
- 183
- 1
- 7
4
votes
1 answer
Whitelist Elastic Load Balancer based on IP
I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS of the ELB, only IP addresses ("Your IP addresses…
![](../../users/profiles/209489.webp)
Bas Peeters
- 223
- 1
- 5
- 11
4
votes
1 answer
How would I create a IP whitelist for tomcat?
I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only.
I understand this is normally the job of the firewall but in this case that is not an option.
We are doing a deployment…
![](../../users/profiles/229607.webp)
yhware
- 249
- 1
- 3
- 6
4
votes
1 answer
How to white-list specific PHP script process in CSF?
I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must look suspicious to csf.
Now I know how to whitelist…
![](../../users/profiles/162210.webp)
Luke Franklin
- 151
- 1
- 5
4
votes
1 answer
Restrict WSGI based on IP
So I have trac running on my debian server with the VirtualHost file looking like:
...
WSGIScriptAlias / /srv/domain/trac.wsgi
WSGIScriptReloading On
WSGIApplicationGroup %{GLOBAL}
Order deny,allow
Deny…
![](../../users/profiles/38523.webp)
ingh.am
- 273
- 3
- 15
4
votes
3 answers
Postfix restrict recipients
how can I configure postfix to allow sending to a certain (external) domain only?
I'm already using check_recipient_access. Content of my /etc/postfix/recipients_restrictions:
domain.com OK
My (current) configuration:
smtpd_recipient_restrictions…
![](../../users/profiles/143141.webp)
Eleven-Two
- 71
- 2
- 5
4
votes
1 answer
DNS Resolver White List and block all other domains
A customer asked us to put on a DNS Resolver for its network.
What he requests is:
A list of allowed domains (white list) that the dns resolver can answer (anche cache)
Any other domains outside the whitelist must return a invalid dns record.
This…
![](../../users/profiles/140566.webp)
CeccoMe
- 43
- 4
4
votes
1 answer
BIND Whitelist Config
Im trying to setup a 'whitelist' DNS server for a small school network to prevent the kids accessing inappropriate sites (ie. students should only be able to access a pre-selected list of sites) and be forwarded to an access-denied page if they try…
![](../../users/profiles/118867.webp)
garyj
- 41
- 2
4
votes
1 answer
how to whitelist IPs connecting to MS SQL Server with firewall
What are some good links.articles on how to white list, with flexibility, IPs connecting to MS SQL server. (using win server 2008 r2, if it matters)
Thnkas
EDIT:
I want to be able to whitelist IPs conecting to MS SQL Server via the firewall. I need…
![](../../users/profiles/49164.webp)
Letseatlunch
- 141
- 1
- 10
3
votes
1 answer
How wildcards works in Squid whitelisting configuration?
I'm a developer, not a sysadmin but I have the task to maintain a file which is basically a list of domains to whitelist. This file is used in the Squid caching proxy. The content of the file looks like this:
.example.com
.google.com
.bing.com
The…
![](../../users/profiles/31255.webp)
AlexV
- 169
- 1
- 2
- 16
3
votes
1 answer
Postgrey whitelist and log questions
I install Postfix 2.6.6 on Centos 6
1) /etc/postfix/postgrey_whitelist_clients.local is
#Clients that should not be greylisted. See postgrey(8).
senderDomain.digital
Restarted postgrey but sometimes the rule is not followed.
Aug 30 17:03:56 host…
![](../../users/profiles/261994.webp)
dstonek
- 223
- 2
- 10
3
votes
1 answer
Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1
mod_security with custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8
Whitelist rule:
SecRule REMOTE_ADDR "^10\.10\.10\.10" phase:1,nolog,allow,ctl:ruleEngine=Off,id:104008
If a request is sent to the server that includes…
![](../../users/profiles/238865.webp)
Santrix
- 253
- 3
- 10
3
votes
2 answers
HAProxy - Will HAProxy automatically reload list files?
I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy.
So if HAProxy loads whitelists like this.
acl whitelist src -f /path/to/ips.list
If ips.list were to be modified would HAProxy…
![](../../users/profiles/243128.webp)
Michael
- 31
- 1
- 2
3
votes
2 answers
Nginx geoipblocking & allowing LAN IPs
I'd like to block IPs with geoip except whitelisted countries AND the local area network.
The first part works flawless, the second one not.
Somwehere searching the internet I found the codes LH (local host) and LN (local network), but they are…
![](../../users/profiles/214413.webp)
john
- 31
- 1
- 2
3
votes
1 answer
Is there an open source equivalent of Windows software restriction policies for Linux?
For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. It seems there are some commercial ones (e.g.…
![](../../users/profiles/55396.webp)
simon
- 714
- 7
- 20