Questions tagged [deny]

76 questions
0
votes
1 answer

Apache LimitExcept GET to IP address but deny all methods to other IPs

I'm having some trouble with getting the Order directive right in a vhost configuration in Apache. I have some IP addresses that I want to totally deny access to the entire vhost. These have been previously flagged as malicious. I also want to deny…
batfastad
  • 456
  • 1
  • 11
  • 22
0
votes
2 answers

I need help w/iptable rules

Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere The above 'ACCEPT'-line is quiet confusing to me. Doesn't it mean, that I allow all incoming traffic?…
0
votes
3 answers

Inline includes for httpd.conf?

Let's say I have a file list_of_naughty_ip_blocks.conf. Can I use the include directive to achieve the equivalent of line 8 below in my httpd.conf? If so, what is the proper syntax? Anything to note about the formatting & syntax of…
0
votes
1 answer

Completely random 403 errors despite explicit Allow from all

I do not have physical access to the server and do not have access to the logs. Some files are generating 403 errors despite me putting an .htaccess with an: Order Deny,Allow Allow from all I even tried to put an explicit FilesMatch in one of the…
Rolando Cruz
  • 203
  • 2
  • 8
0
votes
1 answer

Deny all except a range of IP'S IIS 7.5 problem

I want to set up a Deny all rule for a specific range of IPS, so I wrote the range, lets say 76.200.0.0 and its mask 255.255.0.0. The problem is that as my personal server is on a LAN, IIS takes the local IP of my router to look for an exception, so…
Msam85
  • 113
  • 4
0
votes
1 answer

How do I block host name instead of just IP?

I was wanting to block a list of specific hosts, specifically so my server has no access to them at all. I tried using host2ip and entering the result into IP tables , but the IPs don't seem to lead to the site and I can still access the domains…
John d.
0
votes
4 answers

How to refuse IP's with no reverse DNS with Apache2 or iptables?

With Apache2, or iptables, is there a way to refuse visitors if their IP has no reverse DNS, or does not resolve at all? I have a website targeted to a specific population who has valid reverse DNS. Some spammers and hackers who do not have a…
Weboide
  • 3,345
  • 1
  • 25
  • 33
0
votes
1 answer

apache deny directive

I am using apache deny to deny a country's ip ranges(Turkey in this case). However from the apache log I still see ips from .tr(using dls connection presumably) accessing and get a valid http 200 response: dslxxx.xxx-xxxxx.ttnet.net.tr what am I…
user12145
  • 1,115
  • 6
  • 28
  • 47
0
votes
0 answers

deny direct access to folder but allow rewrite redirection

I have a question about htaccess. I have a rather complex website structure on the server and I use htaccess for redirection. the site structure is as follows web/project/test_project/ ├─ admin/ ├─ catalog/ ├─ index.php In web/ folder I have…
0
votes
0 answers

web.confing ipSecurity IP deny entries are not denied

Windows Server 2019 with IIS 10. I'm trying to configure a list of "deny IP" entries in the IIS web.config (see below), but the IPs are not blocked. At the same time if we enter the same IPs manually, via the IIS Manager (IP Address and Domain…
AKha
  • 1
0
votes
0 answers

Adding Multiple IP addresses in Source field in ACL of EC2 while configuring inbound rule

Why can't we add multiple IP addresses to deny access from them in the source field in NACL of EC2 while configuring inbound rule ? What is the solution in this case in order to block a list of IP addresses and deny access them to an ec2 instance…
0
votes
1 answer

Block access for IP for custom URL (query_string)

nginx 1.19.9 I have URLs like this https://example.com/test?mindbox-message-key=... https://example.com/men?mindbox-message-key=... https://example.com/women?mindbox-message-key=... https://example.com/chile?mindbox-message-key=... and I need to…
0
votes
0 answers

HaProxy deny http-request unless header contains specific string

I’m trying to add a configuration in my Hap conf for a client, who is using a special header. What I would like to do is to deny http requests if this header Is present and if the query do not contain strings that I would « whitelist » (like ABAB10…
-1
votes
1 answer

Nginx allow/deny not working (403 Forbidden)

I am attempting to set some allow/deny directives within nginx for a few subfolders on my server. I am modifying the /etc/nginx/sites/enabled/default file, which is listed below: server { listen 80 default_server; listen [::]:80…
user671460
  • 45
  • 1
  • 2
  • 7
-1
votes
2 answers

Nginx deny doesn't work for folder files

I'm trying to restrict access to my site to allow only specific IPs and I've got the following problem: when I access www.example.com deny works perfectly, but when I try to access www.example.com/index.php it returns "Access denied" page AND php…
Ubertone
  • 1
  • 4