Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
I am trying to create an ACL (Access Control List) to block or allow mallicious webtraffic in the web application.
Is there a way to dynamically update the ACL (of a router, firewall, IIS, Apache webserver or Windows server) through a web application programming language like ASP.NET, PHP or any web application programming language at all?
I want to be able to dynamically make a deciscion to block ip address via the web application.
If you use older versions of IIS, you can give this a shot.
If you are on IIS 7, you should try to make use of the Dynamic IP Restrictions (DIPR) module for IIS 7.0. It provides protection against DoS and brute force attacks. DIPR automatically tracks the IPs and you don't have to do that yourself. Check this out.
If you still want to take matters into your own hand, you can look at using the IP restrictions feature settings. This basically changes the section system.webServer/security/ipSecurity in the ApplicationHost.config file, which you can programmatically do. Take a look at this. I have not tried this. So, cannot tell you this will work for sure but it is worth giving a shot at. You can always test and see if it works.
Related
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 1 year ago.
Improve this question
I had the idea for an in-browser ssh client, but i couldnt find any detailed explanation on how to write a SSH client. I tried looking it up but i couldnt find anything(Most results were about Putty or rankings of clients).
One idea would be to write an express app on the server that just executes the command it gets by the URL paramater or something else, but
it wouldnt be very secure i guess
i got curious
I think it works similarly to a websocket. First you send a normal http request or something and then you try to "upgrade" the request to a ssh tunnel
How does http/ssh protocol work? couldnt help
Edit:
Any Keywords or links to articles about how to code your own SSH Client or server would help
Thanks
You may just tunnel your ssh connection through Web Socket.
The problems are how you build the functionality of ssh client if you want ssh connections start from local users.
To develop the client in browser(meanwhile in a site), the most works can only be done by JavaScript.
However, because of secure problems, JavaScript has lots of limits in contrast with normal local programs.
The another way you provide that execute commands on server is surely easy to do, but the problem is : how can I trust the web application and the server as I need to provide my private information?
If I can use mature ssh technology to 100% ensure my security, how do we make people believe that the ssh web application is totally safe and willing to use it?
Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 5 years ago.
Improve this question
I want to create a web server that I can accesses over the internet (not just locally) and can run and execute python scripts. These scripts will be doing some querying on .db files and returning processed query results. I want to be able to run POST and GET methods on my web server. How should I go about doing this? This is for a school project. From my research, I would need a dedicated computer to be my web server and I don't have those resources.
Thank you.
I would recommend Flask. It will work as a simple web server that let's you run POST and GET against it as well as serving pages. Since it is a Python application, running Python scripts are just part of the code.
In addition to it accomplishing what you want, you could run this on just about any computer you could load Python on (Windows, Linux, Mac, Raspberry PI) thus eliminating the requirement for a dedicated computer.
http://flask.pocoo.org
Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
Can anyone explain to me in layman what's SSH (Secure Shell) in a shared hosting?
I know you can access the web hosting server remotely using a command line interface using an application like Putty. But does it give you have more access to the server or it's another way of creating directories or uploading files and stuff like that? Or you can install extensions or do more advanced things?
Thanks.
Depends on the restriction the host sets, but it often lets you run command line utilities, often used for things like batch processing files, changing file permissions, etc.
In other words, SSH gives you access to do most things you'd be able to do if you were logged in to the machine locally (without root access).
It is just a security layer that encrypts all data flowing to and from the server so other people can't read it's contents. This is especially useful if you are dealing with sensitive information.
Closed. This question is off-topic. It is not currently accepting answers.
Want to improve this question? Update the question so it's on-topic for Stack Overflow.
Closed 10 years ago.
Improve this question
I've inherited a website to build. I've just come to realization that the website's server is not typical to what I've always worked with; EG - I usually create an FTP with the hosting account and work live at http://www.mycoolclients.com/dev/index.html
I've found that I must connect using; SSH. I have little direct server experience. I'm told I need to work with linux or download something like 'putty'. How do I connect to work live at this situation?
Use sftp instead of ftp.
Learning how to use ssh would definitely be valuable as it's widely used and extremely useful, but in the immediate you can just use sftp for anything that you previously used ftp for. sftp will give you the same interface as ftp, but connects via ssh.
You didn't mention what ftp software you use, but many also support connecting via sftp.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 5 years ago.
Improve this question
Does DNS server software exist with a built-in authenticated REST API for managing records?
Alternatively, is there a layer on top of any existing DNS software to manage DNS records?
You might try Openstack Designate. It's a REST API that runs on top of a standard dns nameserver.
REST API for domain & record management
Multi-tenant
Integrated with Keystone for authentication
Framework in place to integrate with Nova and Neutron notifications (for auto-generated records)
Support for PowerDNS and Bind9 out of the box
callsign is a mini DNS server written in Python that supplies a REST API. In order to authenticate your requests you can use iptables to restrict access to specific IP addresses.
If you 'd like something different for authentication, you can write your own API over either its command-line interface or its internal Python API by importing the package. It is licensed under the Apache license, so its quite permissive on what you can do with your code that uses it.
There's no DNS server software I know of with a built-in REST API.
The options I know of are:
use standard dynamic updates
use the IETF "Name Server Control Protocol", once it's finished and clients available (e.g. DNSCCM)
It wouldn't be hard to write a quick set of RESTful scripts that can produce dynamic update messages - I've seen it done using Net::DNS for Perl.