Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [whitelist]

145 questions
4
votes
2 answers

EC2 Security Group, restrict inbound access by hostname

I have written a web hook for PayPal IPN and I only want to allow access from PayPal servers on Port 80/443 to the EC2 instance hosting the end point. In the EC2 security group console I can only filter by IP/Range. This isn't adequate as PayPal say…
jim
  • 183
  • 1
  • 7
4
votes
1 answer

Whitelist Elastic Load Balancer based on IP

I'm serving HTTP traffic on port 80 through an ELB. Since a short time, a growing amount of clients are asking me what our IP addresses are (to harvest data). Apparently they can't whitelist the DNS of the ELB, only IP addresses ("Your IP addresses…
Bas Peeters
  • 223
  • 1
  • 5
  • 11
4
votes
1 answer

How would I create a IP whitelist for tomcat?

I'm extremely new to tomcat but I need to configure my company's tomcat server so that we can allow restricted IP addresses only. I understand this is normally the job of the firewall but in this case that is not an option. We are doing a deployment…
yhware
  • 249
  • 1
  • 3
  • 6
4
votes
1 answer

How to white-list specific PHP script process in CSF?

I repeatedly receive a "Suspicious Process" notice from lfd. I'm 100% positive that the PHP script triggering this warning is safe. I wrote it myself and it makes some cross server calls that must look suspicious to csf. Now I know how to whitelist…
Luke Franklin
  • 151
  • 1
  • 5
4
votes
1 answer

Restrict WSGI based on IP

So I have trac running on my debian server with the VirtualHost file looking like: ... WSGIScriptAlias / /srv/domain/trac.wsgi WSGIScriptReloading On WSGIApplicationGroup %{GLOBAL} Order deny,allow Deny…
ingh.am
  • 273
  • 3
  • 15
4
votes
3 answers

Postfix restrict recipients

how can I configure postfix to allow sending to a certain (external) domain only? I'm already using check_recipient_access. Content of my /etc/postfix/recipients_restrictions: domain.com OK My (current) configuration: smtpd_recipient_restrictions…
Eleven-Two
  • 71
  • 2
  • 5
4
votes
1 answer

DNS Resolver White List and block all other domains

A customer asked us to put on a DNS Resolver for its network. What he requests is: A list of allowed domains (white list) that the dns resolver can answer (anche cache) Any other domains outside the whitelist must return a invalid dns record. This…
CeccoMe
  • 43
  • 4
4
votes
1 answer

BIND Whitelist Config

Im trying to setup a 'whitelist' DNS server for a small school network to prevent the kids accessing inappropriate sites (ie. students should only be able to access a pre-selected list of sites) and be forwarded to an access-denied page if they try…
garyj
  • 41
  • 2
4
votes
1 answer

how to whitelist IPs connecting to MS SQL Server with firewall

What are some good links.articles on how to white list, with flexibility, IPs connecting to MS SQL server. (using win server 2008 r2, if it matters) Thnkas EDIT: I want to be able to whitelist IPs conecting to MS SQL Server via the firewall. I need…
Letseatlunch
  • 141
  • 1
  • 10
3
votes
1 answer

How wildcards works in Squid whitelisting configuration?

I'm a developer, not a sysadmin but I have the task to maintain a file which is basically a list of domains to whitelist. This file is used in the Squid caching proxy. The content of the file looks like this: .example.com .google.com .bing.com The…
AlexV
  • 169
  • 1
  • 2
  • 16
3
votes
1 answer

Postgrey whitelist and log questions

I install Postfix 2.6.6 on Centos 6 1) /etc/postfix/postgrey_whitelist_clients.local is #Clients that should not be greylisted. See postgrey(8). senderDomain.digital Restarted postgrey but sometimes the rule is not followed. Aug 30 17:03:56 host…
dstonek
  • 223
  • 2
  • 10
3
votes
1 answer

Mod Security ctl:ruleEngine=Off Whitelist Fails in Phase 1

mod_security with custom rules and whitelists in separate .conf files - Apache 2.2, modsec 2.8 Whitelist rule: SecRule REMOTE_ADDR "^10\.10\.10\.10" phase:1,nolog,allow,ctl:ruleEngine=Off,id:104008 If a request is sent to the server that includes…
Santrix
  • 253
  • 3
  • 10
3
votes
2 answers

HAProxy - Will HAProxy automatically reload list files?

I have text files with lists of IP addresses that I want to use to help determine to right actions to take with HAProxy. So if HAProxy loads whitelists like this. acl whitelist src -f /path/to/ips.list If ips.list were to be modified would HAProxy…
Michael
  • 31
  • 1
  • 2
3
votes
2 answers

Nginx geoipblocking & allowing LAN IPs

I'd like to block IPs with geoip except whitelisted countries AND the local area network. The first part works flawless, the second one not. Somwehere searching the internet I found the codes LH (local host) and LN (local network), but they are…
john
  • 31
  • 1
  • 2
3
votes
1 answer

Is there an open source equivalent of Windows software restriction policies for Linux?

For a presentation I am doing, I am trying to find out if there is a Linux based open source application whitelisting service for Linux, Similar to software restriction policies in Windows since 2002. It seems there are some commercial ones (e.g.…
simon
  • 714
  • 7
  • 20
1
2
3
…
9 10