LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-02-2014, 04:15 PM   #1
b_unix
LQ Newbie
 
Registered: Oct 2007
Location: Ottwaw Canada
Distribution: Fedora
Posts: 24

Rep: Reputation: 0
csrf meta tags "can they be blocked ?" via iptables


Quick Question

I'm currently running a remote site that uses csrf meta tags

in my iptables
configuration
block site "abc"

if a meta tag was received/requested hdgsebeuicimmeabc
would it be blocked ?

The file was requested and the file exist on the server
I get the requested file with 0 conntent ?

I'm trying to figure if this is a configuration issue at my end or somthing going on at the server end?

wget reports a (406) error ?
 
Old 01-02-2014, 06:37 PM   #2
Habitual
LQ Veteran
 
Registered: Jan 2011
Location: Abingdon, VA
Distribution: Catalina
Posts: 9,374
Blog Entries: 37

Rep: Reputation: Disabled
406 - Not Acceptable

block like so?
Code:
iptables -I INPUT -p tcp --dport 80 -m string --algo bm --string "abc" --to 1000 -j DROP
 
Old 01-04-2014, 10:21 AM   #3
b_unix
LQ Newbie
 
Registered: Oct 2007
Location: Ottwaw Canada
Distribution: Fedora
Posts: 24

Original Poster
Rep: Reputation: 0
Thank-you

A little more detail just to clarify things

the request comes in IE as a html get request
the server see this process the request and responded as required

In this case it returns a js, that request a jquery to render the requested page or part of the page. i'm getting a call to a HTML format as opposed to the correct call to the js file

in the server logs I can see the response to call the html format

Now I can see the client not getting the correct response, as it is filtered buy IPTABLES
what I'm having a hard time getting my head around is why the server is calling the HTML response

Could IPTABLES be responsible in changing the header requested mime type form json to html

any thoughts?
 
Old 01-04-2014, 12:11 PM   #4
jpollard
Senior Member
 
Registered: Dec 2012
Location: Washington DC area
Distribution: Fedora, CentOS, Slackware
Posts: 4,908

Rep: Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513Reputation: 1513
no

IP tables doesn't as a rule do deep packet inspection/filtering. You have to add custom modules for that.

The web server just isn't sending back what you want.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Iptables "accept all everywhere" but still blocked pingu Linux - Networking 1 06-17-2013 09:34 AM
emerge kde-meta "die "econf failed"" on kde-base/kontact-3.5.9 Kruppe Linux - Laptop and Netbook 2 06-17-2008 05:45 AM
"NIM thread blocked" & "Deadman Switch (DMS) close to trigger" errors sosborne Linux - Networking 1 06-28-2006 02:07 PM
"NIM thread blocked" & "Deadman Switch" errors sosborne AIX 3 06-01-2006 11:21 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:15 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration