Tag Info

New answers tagged

1

While I've not tried it personally, having read through the HSTS standard (RFC 6797) I interpret/understand the following: If the parent domain is HSTS compliant then it does not have to but can enforce policy for subdomains to also be HSTS compliant by issuing the includeSubDomains directive in the STS HTTP header. If the parent domain is not HSTS ...


3

FTP is an ugly protocol because it uses dynamic ports, which either needs a wide open firewall or specific configuration within the FTP clients. Also it sends login information in clear by default and the encrypted version FTPS produces even more problems with firewalls. These things together make firewall admins hate the protocol and they better deny ...


4

Its likely that they do not want to spend the time considering all of the possible security issues, so your request was denied. Network Admins are under a lot of pressure to maintain a secure network against unknown threats. You should look into using a server or service that allows you to connect in via port 80 or 443, but will then forward your traffic ...


1

Can anyone tell me why the following code isn't working? By "not working", I assume it is blocking everyone, including yourself? You need to remove the deny from all directive from that code block. This is overriding your allow from... line. All requests which don't match your IP address are implicitly deny'd, because of the Order directive. The ...


0

I don't see anything in their configuration that prevents somebody browsing into that protected folder. You could add configuration to the .htaccess file to prevent access to it: <Directory /app/protected> Order deny,allow Deny from all </Directory>



Top 50 recent answers are included