Questions tagged [whitelist]
The whitelist tag has no usage guidance.
150 questions
0
votes
1
answer
216
views
Postfix : Only receive emails from specific tlds?
I've been searching everywhere and can only find how to block specific tlds.
I've set up a rejected_domains file that blocks tlds which I have to manually add as they appear in my inbox.
Basically, ...
0
votes
1
answer
446
views
Block an IPv6 Address where only whitelisting is available
Came across a use case where I need to block an IPv6 address from accessing a site. It is fairly simple to block an IPv4 address by skipping the specific address from the whitelist range. Does any one ...
0
votes
1
answer
180
views
Limiting outbound traffic to AWS Management Console or other Amazon consoles
I've a network whose outbound traffic is strictly limited to a whitelist of sites or domains. I searched and couldn't find any documentation about how could I allow stations on this network to use AWS ...
0
votes
1
answer
922
views
Whitelisting Gmail SMTP in CSF
In my csf.deny, I have 0.0.0.0/0 blocked to prevent requests being sent to the raw server IP. This creates issues with sending e-mails. I utilize Google SMTP to send e-mail. I can't seem to figure out ...
1
vote
0
answers
15
views
Setup Authentication for landingpage fetching data from proxy via access restriction?
Imagine the scenario where you have a client who wants you to implement calls to an external API on a landingpage that you've setup for them. The external API works based on a contract and API keys ...
1
vote
1
answer
442
views
Apache - Require authentication for all but one IP
We have a website that users need a valid jwt token to access however we need a certain IP access WITHOUT the token. Here's what I am trying to use to no avail:
<Directory ${VIDEO_ROOT}>
...
0
votes
3
answers
1k
views
How to set up whitelisting for DNS forwarding server with BIND9?
I have DNS forwarding on Ubuntu 20.04 LTS using Bind 9. I need to implement whitelisting, however I have not found any tutorials.
I have reviewed Response Policy Zones (RPZs), but they are used only ...
0
votes
1
answer
425
views
Is it safe to use Internet-facing RDP in combination with IP-whitelisting on Windows Firewall?
I am using a VPS that I connect to using RDP over the internet. Since I was experiencing an incessant stream of brute force attacks on the RDP, I configured the windows firewall to only allow certain ...
0
votes
1
answer
347
views
Network Monitoring on Linux (RHEL/CentOS)
I am trying to monitor outgoing network traffic on a Virtual Machine running CentOS (Guest) on a Windows Machine (Host).
I installed Fiddler on the Host Machine (Windows) and allowed remote ...
0
votes
1
answer
921
views
Dynamic IP address whitelisting for regular data transfers back home while travelling
I will be going on a 100 day (global) tour where we will be generating 1TB of video data per day. To mitigate risk of data loss we plan to drop one copy of hard disks with local volunteers in each ...
1
vote
1
answer
404
views
Managing Firewall Rules for Azure Analysis Services
My customer (a legal firm) has an Azure Analysis Services database. Access to the model is tightly controlled to prevent leakage of confidential data. Employees who need to access the model whilst ...
1
vote
2
answers
2k
views
Whitelist both IPv4 and IPv6 in AWS Security Group
I am setting up an SFTP server, I want to white list all the IPs in the Security Group so people can connect to it from anywhere.
At the moment I am adding 2 rules to the Inbound rules, one rule for ...
-1
votes
1
answer
378
views
Secure server accessing R repository
Disclaimer: Please forgive my complete ignorance and lack of knowledge with this subject. I am not an IT professional nor do I have experience with secure networks/servers or R. I just happen to be ...
0
votes
1
answer
1k
views
mod_security with OWASP CRS: Custom rule for whitelisting googlebot
I am about to use OWASP CRS rules with mod_security on my WHM/cPanel enabled CentOS server (with apache). But I fear that accidentally Googlebot may be blocked by one rule or the other. After enabling ...
4
votes
1
answer
2k
views
fail2ban: whitelist IPv6 address
I need to whitelist an ipv6 address in fail2ban, however when I just add them to the ignoreip statement in my jail.conf they get blocked anyways.
This is what I have in /etc/fail2ban/jail.conf
[...
3
votes
0
answers
2k
views
Allow IP addresses to bypass authentication in Nginx auth_request module
I have a config like below. I would like to allow a list of IPs to bypass authentication.
server {
listen 80;
server_name test2.example.com;
add_header Strict-Transport-Security max-age=2592000;
...
1
vote
2
answers
9k
views
How can I use iptables as a per-user whitelist web filter on Linux?
I'm trying to use iptables to create a web filter on a local machine that whitelists a list of websites and blacklists everything else on a per-user basis. So one user would have full web access while ...
0
votes
1
answer
77
views
Api request that return virtualHosts list name or ip
Is there a way for send a request to apache web server and it be returned list of all virtualHosts, name or ip address? Can be done it with some api?
I Know that executing apache2ctl -S I get info on ...
0
votes
1
answer
49
views
Request Whitelisting for Java 7 Deployment
I just took over a project last month.When I tried to deploy the project, it popped up a message told me to migrate to Java 8 application or add to whitelist.
I have tried the steps on the document of ...
0
votes
1
answer
834
views
Openresty cookies whitelist when using proxy_pass
I'm setting up an openresty reverse proxy that will dispatch traffic to one of 2 backends depending on the path.
I would like certain cookies from backend1 not to be passed to backend2.
How should I ...
-1
votes
3
answers
4k
views
windows 10 firewall: block any ip address but one
i have just enabled remote desktop on a windows 10 computer, and in fact when i telnet to 3389 port from any other computer i can reach that service, but what i want is to deny the connection from any ...
0
votes
1
answer
794
views
How to selectively allow IP addresses to access my Nginx server hosted on Google Cloud - Compute engine. (Whitelisting)
I have an Ngnix server hosted on Google Cloud - Compute engine. I'm creating a public IP for this. However I want to allow requests from few IP addresses only which means I want to allow only few ...
0
votes
1
answer
369
views
How to whitelist users at the MX server, instead of the mail server, using Sendmail
I am running Sendmail 8.15.2 on Fedora 30 with a MX relaying to a mail server.
The relay-domains file works fine to funnel only the desired domains from the MX to the mail server. But the mail server ...
0
votes
3
answers
593
views
Whitelisting my home router on corporate servers? [closed]
I need to access my corporate server (which is restricted) from my home. Corporate Admin is asking for Gateway IP of my home network so that they can whitelist my Home network. Basically, All my ...
0
votes
1
answer
140
views
Is it possible to whitelist a specific IP that belongs to a banned network?
I need to whitelist a specific IP that belongs to a fail2ban banned network. Does ignoreip option works in this case? How can I solve otherwise? I've to manage directly with iptables for this IP?
...
-1
votes
1
answer
3k
views
Whitelist ICMP traffic with iptables
I'm configuring iptables, for an Ubuntu Server VPS. It runs sshd, and various Dockerised web apps. It is not a router, and is not part of a complicated network.
After researching the topic, I decided ...
6
votes
2
answers
1k
views
Postfix: ACCEPT if RBL and SPF checks pass, DUNNO/greylist otherwise. How to do it?
I would like to accept all clients that pass RBL and SPF checks (and possibly some checks, but these are minimum requirements for me), and greylist those who don't. When a client passes the SPF check (...
1
vote
1
answer
357
views
How to restrict access to my subversion server (i.e. svnserve) by IP address, so only my IP can checkout, commit, etc.?
I'm using Ubuntu and I have my subversion server running as you can see below:
root 31422 1 0 06:45 ? 00:00:00 /usr/bin/svnserve -d -r /var/svn/repos --log-file=/var/log/svnserve.log
...
0
votes
1
answer
266
views
Whitelisting mobile clients based on IPv6 Interface ID
First allow me to say I am only modestly experienced with IPv6. Be gentle.
We (my company) currently whitelists inbound client access based on IPv4 addresses/subnets before they even talk to our ...
0
votes
1
answer
413
views
Spamassassin - Whitelist Domain A to Domain B
I want to whitelist certain domains in spamassassin only if the recipient is also in a specific domain. As far as I can tell from the documentation, there seems to be no way to configure this ...
0
votes
1
answer
2k
views
nginx deny to allow a single IP
I'm trying to set up an nginx config that allows only one source IP to access /admin.
I tried the following nginx.conf:
user root;
events {
}
http {
server {
listen 5000;
location ...
3
votes
1
answer
6k
views
How to whitelist individual email address with rspamd
How can a specific from address be whitelisted using rspamd? The address I have in mind is [email protected] so I certainly don't want to whitelist the whole hotmail.com domain since it is the ...
6
votes
1
answer
10k
views
Whitelist an Individual's IPv6 Range via .htaccess
I have a section on a website that blocks access to all IPs, except for those that are whitelisted. For IPv4, this is very simple, because even with dynamic IPs, they generally won't changed for ...
0
votes
2
answers
4k
views
Whitelist subdomain (*.example.com) from Linux server
I need to do some file migration to Google Drive and our problem is that during this process Drive need to contact our images server. We have this images in a regular Apache server listening on port ...
1
vote
1
answer
912
views
AWS - IP White listing and Path Rerouting
I am new to AWS and currently trying to implement the following.
I have an API server which sits in an EC2 instance. I would like to implement some filtering and rerouting mechanism for 2 sets of ...
1
vote
1
answer
708
views
Nginx. White-list top filter and no auth white-list and basic auth simultaneously
Can't find a way to build the next scheme.
A whitelist of IPs ever allowed. Ban for most of the net.
A sublist of whitelisted IPs allowed to bypass auth. A part of a local net, for example.
Basic ...
1
vote
1
answer
4k
views
Resolve specific Domain query using View in BIND9 (Forward)
I am trying to setup a whitelisted domain forwarder in my bind9 but it wasn't successfully accomplish maybe due to the configuration that I applied.
A couple months ago, I did setup the same ...
1
vote
0
answers
618
views
CISCO 2960-X mac filtering issue (mac Blocked even it is permitted)
I have a weird issue, I created a mac access-list with the list of all permitted mac-addresses.
It is working on all except one machine, once the access list is configured on interface, the connection ...
6
votes
1
answer
16k
views
python get-pip.py not working behind proxy
i'm having an issue when trying to run devstack which is trying to get pip using the following command i added the verbose parameter
sudo -H -E python /opt/stack/devstack/files/get-pip.py -c /opt/...
-2
votes
2
answers
3k
views
Whitelist domain name for speedtest.net to allow a test to run
Using a 4G Router (HUAWEI B315) with a domain name whitelist to prevent excessive data usage.
It will only allow our custom API through.
However when testing the router at new venues it would be ...
0
votes
1
answer
15k
views
Whitelisting Google Recaptcha
Barracuda Web Filter blocking the Google Recaptcha on one of our vendors sites.
We have tested with an unfiltered user to verify that it's the webfilter blocking
Searched for what to whitelist, the ...
-1
votes
2
answers
79
views
Block a computer from all but 1 or 2 websites?
I'm setting up a computer for our machine shop that is intended for them to only get to a couple sites they may need while working. It needs to still be on our network so they can look at files saved ...
1
vote
1
answer
106
views
Centralized IP whiltelist for many servers on different providers
I have many servers on different providers.
On each server I have permitted ssh access to port 22 only to a whitelist of IPs.
If I need to change/add an IP address I must change the configuration in ...
2
votes
1
answer
7k
views
Not receiving mails sent to a G Suite group (list)
my company uses a G Suite account and we have many Gmail users with an own domain (let's say mydomain.com) and many groups (lists) so, if someone sends an e-mail to a group, every user added in that ...
0
votes
0
answers
57
views
windows 10 - firewall IP based rules
I have a long list of IP ranges which I want to whitelist in windows firewall.
I've found how to add a single range, but typing one range at a time will be very hard.
Is there a way to import a list ...
1
vote
1
answer
6k
views
NginX Whitelist by IP and hostname. Otherwise HTTP auth
On Apache, we had a setup where we could have http auth for all of our dev branches unless the hostname matched our whitelist or if the visitor's IP matched our whitelist.
This is what we had:
...
1
vote
2
answers
10k
views
Firewalld: How to whitelist just two IP-addresses, not on the same subnet
I'm running firwalld on a VPS / webserver.
The public zone is active and default (and I do not want the change that). How do I allow only these two external IP-addresses to access the VPS (i.e. all ...
0
votes
1
answer
235
views
Cloudflare IP range error
I need to whitelist an IP ranges 91.232.230.0/23 and 79.142.16.0/20 on CloudFlare. If I enter these IP ranges I get the error: An IP range (CIDR) must be a /16 or /24
How can I whitelist these?
I've ...
0
votes
1
answer
79
views
Allow IPs per domain basis - solution verification
Background
I have 2 domains. I need to allow certain IP addresses as follows:
a.domain.io - all IPs allowed
b.domain.io - only IP 1.2.3.4 is allowed
Proposed solution
I am not an infrastructure ...
0
votes
1
answer
798
views
Whitelisting devices on a VPN
We have a need to set a file system instance in the cloud with strictly limited access. This has to be on Azure because of client demands. Restricting by IP address won't achieve what we need alone, ...