Questions tagged [restrictions]

73 questions
49
votes
2 answers

Is it possible to restrict the use of a root certificate to a domain

My customer uses a self signed certificate for an application to work. To be able to work, I have to install the root certificate they used to sign the certificate. Is it possible to configure a root certificate so it only validates towards one…
MichaelD
  • 625
5
votes
1 answer

How to block IP address on Apache when it comes from proxy

I have the URL I need to restrict access for specific IP (10.0.0.5). When I do it for direct access in the next way it works perfect: <Location /incoming> Order Allow,Deny Deny from 10.0.0.5 Allow from all </Location> But , when this IP comes from…
Uri Gorobets
  • 59
4
votes
1 answer

rewrite / restrict specific domain name in apache

We have https://example1.com/login and example2.com/login being hosted from the same apache server (2.2.22). I want to restrict /login on example1.com . example1.com/login --> 404 (preferably) or 403 example2.com/login --> login page I tried…
akay
  • 53
  • 2
  • 5
4
votes
2 answers

How Can I prevent a specific application from being run on a specific machine using Group Policy?

I know this is possible to do and I am working on it with limited success. I believe the Group Policy I want is "Do Not Run Specified Windows Applications" - I can enable this and add the .exe I want to the list of programs not to be run. I have…
Mike
  • 77
4
votes
3 answers

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
CJ7
  • 653
4
votes
3 answers

Restrict a port to a single app

I'd like to restrict a range of udp ports to a single application (or a user). What I'd like to achieve is not simply blocking a bind() from other uids, but also remove the range from a pool that can be auto-assigned. For example, if someone tries…
viraptor
  • 1,176
3
votes
0 answers

Securing my NTP configuration

Need some assistance configuring my ntp.conf file for my primary NTP server. Does my configuration accomplish the following: Prevent the servers being polled from changing my configuration? Allow my peer to sync up? Allow clients to get time from my…
hilburies55
  • 31
3
votes
1 answer

Restrict I/O Write usage using cgroups

I am trying to restrict I/O write usage on my server using cgroups. Here is my partition table info: major minor #blocks name 8 0 10485760 sda 8 1 9437184 sda1 8 2 1047552 sda2 Here is my Filesystem structure: Filesystem Size Used Avail Use% Mounted…
Divij Satra
  • 31
3
votes
1 answer

Postfix changes to main.cf are not loaded

Ubuntu 10.04 LTS root@vm1613:/etc/postfix# vim /etc/postfix/main.cf [...] # default restrictions smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated, check_client_access…
apelliciari
  • 179
  • 2
  • 11
2
votes
0 answers

IIS 7 IP and Domain Restrictions not working (set to deny by default)

I have a website on IIS and I am trying to block access to one particular folder from anywhere but our LAN. To experiment, I have added both an explicit deny rule for one particular machine on the same network: and I have also set the module to deny…
Darren
  • 347
2
votes
2 answers

Postfix reject unknown local recipients

I have a problem with backscatter. Spammers send emails to non existent username @ existent domain hosted on my server. I am trying to abort the session instead of sending bounce messages back to forged sender addresses. I tried adding…
J. Doe
  • 21
  • 4
2
votes
1 answer

Restricting access to \\127.0.0.1\c$ on Windows

In an enterprise environment, you usually have several locked down Windows servers (either Windows servers/Terminal server directly, or through Citrix) where the user is logged in directly into a full window application. There are several escape…
invictus
  • 135
2
votes
0 answers

Debian Postfix distribution list accessible only for few adresses

Actually I'm working with Postfix server and trying to implement distribution list with simple restrictions. My assumptions: I created alias: managers@mydomain.com -> manager1@mydomain.com, manager2@mydomain.com, manager3@mydomain.com I want to…
user334962
  • 21
2
votes
2 answers

Does any SATA drive work in any SATA port?

I was under the assumption (apart from restrictions due to old operating systems not being able to read large drives) that as long as a hard drive was of the same type as what is available for the computer (e.g. if the computer has IDE, you can plug…
Mike
  • 689
2
votes
2 answers

smtpd_recipient_restrictions works but not always

I have POSTFIX set up to filter certain email addresses. The main.cf file contains: smtpd_recipient_restrictions = check_recipient_access hash:/etc/postfix/blacklist, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, permit…
Kolja
  • 199
1
2 3 4 5