Week 7 Hardneing

IP Restrictions

• Ip restriction enables admin to selectively allow or deny access to the files, folder, website, and webserver
• This is the same as ufw. ufw is an easy to use firewall for linux this is just like firewalld but has easier commands.

MIME Types

• Multipurpose Internet Mail Extensions
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/MIME_types
• This will allow you to block .ini .exe .sh
  • Block executables

Directory Browsing

• Change default location

Request Filtering

• Request filtering enables a configurable set of rules that allows you to determine which type of request should be allowed or denied for the website and web server
• Includes filtering based on:
  • URLS
  • HTTP Methods (VERBS)
  • Headers
  • Custom Rules (string, files…)

Logging

• It is not as comprehensive as Mod-Evasive - but IP restrictions in IIS