Questions tagged [whitelist]

A whitelist shows data that specifically is allowed. All other data (not on the whitelist) will be filtered out or ignored. A whitelist is the opposite of a blacklist. - Whitelist - only these things. - Blacklist - everything but these things.

Filter by
Sorted by
Tagged with
0
votes
1answer
275 views

Firejail Blacklist/Whitelist Priorities

I have defined the following: whitelist /home/user/.mozilla/firefox/ noblacklist /home/user/.mozilla/firefox/ blacklist /home However I get: ls: cannot access '/home/user/.mozilla/firefox': ...
0
votes
1answer
51 views

Whitelist Simulated phishing landing page

We are running a simulated phishing campaign and one of the landing pages has been blacklisted by google. If you try to visit it in chrome you get the big, red warning page "Deceptive site ahead" (...
1
vote
4answers
518 views

What are the benefits of using IP whitelists to secure cloud servers/resources?

Consider the following scenario: There is a "server" (e.g. database, API, etc) that is "in the cloud" (i.e. hosted on physical hardware that is physically distant from the clients and reachable only ...
0
votes
0answers
44 views

Finding all random IPs and ranges of Torguard VPN or any VPN service provider

I'm securing our networks and want to be able to whitelist all known Torguard VPN ip addresses for accessing my network. I read that I have to use the dig command, but I only get one result when I do. ...
0
votes
0answers
129 views

applocker script rules blocking diagnostic troubleshooter by default

My googling came up with nothing useful. I assume others must have ran into this too. If we start the Network Troubleshooter wizard it generates some temp ps1 files that are blocked silently to the ...
1
vote
2answers
454 views

Is IP whitelisting safe enough for a HTTP Basic protected service available on the internet?

We are discussing about making available through the internet one of our microservices deployed on a public cloud on Kubernetes. This ms offers some sensitive information to the clients. This ...
1
vote
1answer
115 views

On-site Whitelisting vs. Off-site Cisco VPN

A company I’m applying to as web software tester is requiring me to be on-site so they could put me on their whitelist. However, I had a previous job which allowed me to work anywhere, using only ...
1
vote
1answer
153 views

IP-whitelisting for DB access, does solution fit best practices?

All the data we have on our customers sits in our data-lake, which is hosted by one of our suppliers. Currently the security is such that a limited number of users has (limited) access to the database ...
2
votes
1answer
99 views

What port state to expect from Nmap when scanning ports that are open only to specific IP addresses

My firewall has a few ports open but traffic is only forwarded when coming from specific IP addresses (whitelisted). When scanning these ports with nmap from a non whitelisted IP address, what state ...
1
vote
1answer
523 views

Could an attacker spoof a whitelisted IP to access the network?

There is a network that is protected with a firewall and only one IP is whitelisted. Assuming the attacker knows the whitelisted IP, what would prevent an attacker from sending traffic via a spoofed ...
0
votes
0answers
44 views

When using Symantec security, is our IP address our own or shared, should we whitelist?

The company I work for uses Symantec security. When I am connected to the network (by cable) I can see that my IP address is registered to Symantec. My question is, do other companies that are also ...
0
votes
1answer
43 views

Whitelist outbound mail [closed]

Is there a way to limit the list of mailadresses a user can send mail to, to a small whitelist of approved addresses? The only option I can think of right now is a customized contact form, but I'm ...
1
vote
1answer
65 views

domain names with email whitelisting

We have white-listed full domains and that creates uncertainty i.e. myservice.com Anyone can send spam mails and we can't block it. We have white-listed specific emails / IP addresses and there is ...
1
vote
1answer
511 views

Whitelist Application For Windows Server 2012

My problem I am looking for an application which runs on Windows Server 2012 for security reasons. Our server began attacked on many protocols. They are trying brute force attacks with very weak ...
4
votes
1answer
115 views

Why should class names be whitelisted?

I am using the Accept known good validation strategy to sanitize user input (rich HTML) and are using a 3rd party component to do this. The component by default requires every permitted class name to ...
5
votes
2answers
664 views

Is SSH public key authentication sufficient for protecting a server if IP Whitelisting is disabled?

I'm currently working for a startup company who maintains a server on AWS. Currently, our server is set up so that in order to access it via SSH, you need to be on a white listed IP (set up in AWS) ...
0
votes
1answer
140 views

Has there ever been a country that implemented whitelist-based internet censorship?

We hear time and time again of countries censoring internet traffic by blocking IP Ranges. Without getting into the politics of it, let's take for example China's Great Firewall. Even though it is ...
1
vote
2answers
190 views

How safe I am without antivirus on Windows 7 with restricted security policy enabled?

I've Windows 7 with latest updates without any antivirus software. I use ZoneAlaram Free Firewall to restrict application from accessing Internet without my knowledge (every new application requires ...
1
vote
1answer
1k views

Difference between Knowledge-based IDS and behavior-based IDS

I have difficulties in understanding the difference between Knowledge-based IDS and behavior-based IDS. This link says that a knowledge-based IDS uses a database of specific attacks and system ...
3
votes
1answer
2k views

How do I setup SELinux to act a as a true whitelisting solution?

I am working on an appliance device running Linux. I would like to utilize the work done so far with the targeted policy in SELinux space. Since I own everything that should be installed and running ...
0
votes
1answer
102 views

Network Defense- White listing IPs/Ports

If I had a typical home user machine (google, email, youtube, no ssh/ftp, etc...) that had a dynamic iptables white-list that was dynamically updated with IP addresses that have been legitimately been ...
1
vote
3answers
151 views

If LDAP credentials are leaked, is IP whitelist still sufficient protection?

In a situation where LDAP credentials get leaked but there is still an IP whitelist in place... My gut feeling says this isn't right; the credentials should be changed. Is this correct? What ...
1
vote
2answers
3k views

Whitelisting only particular hosts on Windows 10

There is a laptop which is to be secured and only certain websites should be accessible. Reason is possible data theft by user or malware, from vpn-only-accessible websites which this laptop will be ...
0
votes
4answers
249 views

Are there tools that can prompt the user every time an executable uses system functions?

As a programmer I don't use anti-virus programs for a simple reason: I found that viruses are only detected once the executable or a part thereof has been explicitly blacklisted by the anti-virus ...
2
votes
2answers
955 views

Limit web-browsing to list of known well-known websites (whitelist)

I'd like to limit web-browsing to number of websites owned by known internet companies, for example: Google Websites Microsoft Websites Amazon Yahoo Ebay News Etc I understand I can't do it myself ...
1
vote
1answer
442 views

What resources/organizations should we submit applications to for testing, to prevent Anti-Virus “False-Positives?”

A friend's company just released an application recently, which received a false-positive warning with Norton AV from a client. He found something on Norton's website that I believe he said was a ...
3
votes
2answers
5k views

CORS REST API whitelist

I have a REST API. I want to use this API from multiple web applications. I want to only allow requests from Whitelisted clients. My first point of call would be to add the necessary headers to the ...
1
vote
3answers
653 views

When is IP blocking OSI level 7 only and what is the purpose of doing so on multiple locations?

Let's say there is an application that has IP whitelisting, all other IP's are denied. This check takes place on three different locations: iptables, .htaccess, PHP script. Now in what OSI layers ...
1
vote
2answers
2k views

How effective is MAC whitelisting on a Wireless Access Point? [duplicate]

For the sake of context, let's say I set up my home router with WPA2, a strong passphrase and I whitelisted all of my devices. I know the data is encrypted, but is the layer 2 header encrypted as ...
3
votes
1answer
550 views

Application Whitelisting Approaches/Options on non-Enterprise Windows PCs

For a while now I've been kicking around the idea of implementing application whitelisting on a few sets of machines (owned by 2-3 different consulting clients) I administer that seem suitable for it. ...
-2
votes
1answer
212 views

Why not just blacklist every IP except yours?

Inspired as a continuation of this question: Is it practical to pre-blacklist certain GeoIP regions? Why would it not make sense to blacklist every single IP address that shouldn't have access to a ...
2
votes
1answer
78 views

Are there any standard practices for protecting against malicious links being entered in a public form?

A website I'm working on needs to have a form for any visitor to submit a request for information about a service. The user will not need to create an account, and contact details are just part of the ...
32
votes
4answers
5k views

Can or should whitelisting replace encryption?

I've noticed that there is a third-party webservice we utilize programmatically at my job to transmit somewhat sensitive information and I was surprised to see that the endpoint was only using http, ...
4
votes
2answers
5k views

Is there a difference in security between an IP address white list and a domain white list with TLS?

It seems to me that an IP address white list relies on easily spoofed information, while a domain white list, if it forces TLS, at least, relies on the validity of the certificate systems. I may be ...
0
votes
1answer
32 views

Technical term needed: Per default secured / blacklist vs whitelist

I'm currently working on a homework and missing a technical term / known best practice to describe what I have learned or what I feel that is better. It is about a publish / subscribe architecture, ...
1
vote
2answers
477 views

DDoS Mitigation - Whitelist or Blacklist Incoming SOURCE Ports?

For a network offering webservices, I have had recommendations to blacklist a couple of common incoming DESTINATION ports, such as UDP 53, to combat the increasing load from DDoS. I'm wondering if it ...
2
votes
2answers
211 views

Legally port scanning (Whitelist)

I am attempting to set up a security vulnerability scanning server. I have several customers interested in using it to scan their systems. I will be port scanning and carrying out intrusion detection, ...
2
votes
2answers
312 views

Vulnerability scanning: White list pentester or not?

If your company engages a third party pentester to do vulnerability scanning, do you whitelist the pentester so that they can thoroughly scan the machines on the internet, or do not whitelist them ...
0
votes
1answer
3k views

WiFi Network Whitelisting?

At school we have a school-wide LAN network. It connects all the wireless devices to the internet. I've gotten the wireless pass code and have successfully connected to the network, yet I can't use ...
2
votes
1answer
3k views

How to handle a remote office and a client requiring IP Whitelisting?

.NET Developer here, out of my comfort zone on this one. My software company is going remote, where employees can work from home, Starbucks, a Regus office, Spain, anywhere really. One of our ...
3
votes
1answer
2k views

Is it safe to whitelist CDN domains?

I am trying to whitelist URLs for my PC but I want to eventually roll out the rules to my small company's firewall. But I'm having trouble with CDNs since a page may load content from many distinct ...
5
votes
2answers
972 views

How practicable is application whitelisting

I understand that application whitelisting is better and more accurate than black listing. However, my question is, if you whitelist a directory, won't the malware also be able execute in that ...
2
votes
1answer
773 views

Whitelist for HTTP request

Malicious request can come in the form of user agent string, referrer or cookie. To prevent being pawned by zero day attacks such as Shellshock, I have created a whitelist of characters for user agent ...
43
votes
5answers
10k views

Is blocking a country's access to a website a good measure to avoid hackers from that country?

I am located in Venezuela right now, and for the whole weekend have been unable to access grubhub.com and seamless.com. Finally, I tried using the Tor Browser and got access. The same thing happened ...
1
vote
2answers
1k views

Shellshock plus sudo/su environment whitelist bypass - big problem?

The question is: How big a problem is this? Looks pretty big to me. With the shellshock bug it is possible to bypass the whitelist of known-harmless environment variables in sudo, as well as other ...
-1
votes
1answer
2k views

Open list of adult websites for child internet [closed]

Looking for any open and dynamic list(blacklist) of adult,dangerous,+18,sucide,drugs etc web resources to filter it in intranet for children security in internet
3
votes
2answers
4k views

Is IP whitelist sufficient to protect a server? [closed]

I am currently using a server 1 managing incoming traffic from users and a server 2 managing database requests from server 2. Both servers are accesible via Internet. Would IP whitelisting be a ...
2
votes
1answer
2k views

Is htaccess secure enought to whitelist clients IPs?

I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this: order deny,allow deny from all allow from X.Y.Z.Q These days ...
8
votes
4answers
3k views

Outbound proxy which whitelists by server certificate?

Short version: Are you aware of any proxy or firewall device which will permit outbound SSL connections to hosts with approved* SSL certificates only? Long version: Consider the following scenario....
1
vote
2answers
925 views

How to uniquely identify / tag client devices to whitelist VPN access?

I'm just wondering if there is any way to uniquely identify or tag client devices like laptops and towers in order to whitelist them for vpn access. (Note: This is a thought-experiment at the moment, ...