Questions tagged [restrictions]
74 questions
0
votes
1 answer
Does postfix's check_recipient_access map allow for regex?
I am looking to update my postfix configuration so it restricts the domains to which emails can be sent. I am thinking of using smtpd_recipient_restrictions with check_recipient_access, based on this solution: https://serverfault.com/a/412805
Does…
Fulliautomatix
- 13
- 3
0
votes
0 answers
Postfix Restrict Relay Domains Per User
I have a postfix server configured to relay for either mynetworks or sasl_authenticated clients. I would like to limit a sasl_autenticated client to send to a single domain. It looks like I might be able to do this with restriction classes, but I am…
TurboAAA
- 21
- 4
0
votes
0 answers
Restricting one site under Wordpress as Private in AWS ALB
I have configured multiple sites on WordPress and it is connected with internet-faced ALB under AWS.
Is it possible to restrict one site as private on ALB?
Remaining sites needs an public access.
Thanks in Advance.
Arunkumar NKL
- 11
- 1
- 4
0
votes
1 answer
NGINX Conf Feedback Request: Limiting specific API endpoints to $remote_addr(s);
I was using this as a source of information to draw on: https://www.nginx.com/blog/deploying-nginx-plus-as-an-api-gateway-part-2-protecting-backend-services/#access-control
My server is running a docker container behind nginx. This container's…
Austin Foss
- 3
- 1
0
votes
1 answer
What is the best practice for launching a web server as a restricted user?
In order to practice my Linux hardening skills, I am trying to launch a web server following certain security principles. My main goal would be to run the server using a dedicated user with very limited privileges. I thought this might be a good use…
paupaulaz
- 97
0
votes
1 answer
Allow reverse proxy access only from the host server
I have two servers A) frontend server (ip 11.22.33.44), B) backend server (ip 22.33.44.55).
Both use Debian Linux and Apache server.
A) frontend server uses reverse proxy to show content of B) backend server.
I would like to restrict Apache access…
klor
- 344
- 4
- 8
- 25
0
votes
0 answers
Linux pam_time with groups
How do I allow /etc/security/time.conf to be able to restrict groups instead of users?
It works flawlessly with users but not with groups. I need to have multiple groups in my case.
SAAD3000
- 1
- 1
0
votes
1 answer
Cloudflare prohibits API GET request
I am having a trouble with my API's GET request. I settled cloudflare as a firewall for my web application. Behind it, my web application is working on Nginx server. All HTTP Requests are working for the application. But when I try to execute API…
Onur Göker
- 119
- 3
0
votes
1 answer
How to restrict access on only one website (with virtualhost based configuration in httpd) ? I wont to be accessible only from a specific country
I wont to do it from the webserver, is it possible? Or the best practice is with access list's in the fouter, but then how other sites will be accessible from everywhere?
The operating system is "Debian 9" and the webserver is "apache2.4".
aleksandar
- 1
- 2
0
votes
1 answer
ACL conditional zone in Bind9
I'm trying to apply "restrictmoderate.youtube.com" only for kids and let the others access the standard "youtube.com", using Bind9.
# cat named.conf
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include…
Sebastien Damaye
- 33
- 2
- 6
-1
votes
1 answer
Allow winscp access, restrict direct shell access, allow su - for Linux server local user
Is it possible to restrict access for a particular local user in Linux, with below mentioned conditions:
User should have no direct shell access
User should be able to login with command "su -" from any other user shell
User should be able to do…
Arun Krishnan
- 379
- 2
- 3
- 13
-1
votes
2 answers
Postfix access restrictions
I use Postfix 2.9.6 from Debian7. Defined some virtual domains, all works fine as expected.
Now I want to restrict incoming emails for one of my domains to accept email if it come from the same domain, or if sender is sasl_authenticated (from other…
Marcodor
- 99
- 2
-1
votes
1 answer
Prevent internet from being monopolized by one user
In our company, there is a training room which contains 15 computers. Our employees (or external individuals) can follow a training there using these computers.
However, we want to prevent the internet from being monopolized by one user.
We use a…
Sam Hendrickx
- 71
- 9
-1
votes
1 answer
How to use ssh without knowing remote user's password?
I am trying to use ssh and login to a different mac (B) from my mac (A) but do not know B's password. Is there anyway of finding B's password or doing this without access to B?
