ISTIO allow all outbound traffic to a DOMAIN - openshift

Similiar to this topic I need to allow all traffic NOT to IP, but to a domain.
The domain I want to access is google API https://www.google.com/recaptcha/api/siteverify
Any ideas?

You can allow traffic to a specific URL like www.google.com, or to a domain like *.google.com. See this task.
You can allow traffic to a specific path as well, see this blog post.

Right, I did it with making Service Entry and Virtual entry to google.com.
Not to specific endpoint. Thank you for the help.

Related

IP on blacklist due to IP network listed

My google compute engine's/vps IP (146.148.22.101) is blacklisted on the https://www.uceprotect.net/ list as LEVEL 2. Meaning the network 146.148.0.0/17 is listed not my IP itself - Mine is green. I know it is probably google's job to fix this but I do not know how or where to report this. Microsoft mail servers are rejecting all incoming mail originating from my ip because of this listing.
uceprotect.net suggests to register on whitelisted.org costing 25euros/month. Not going to happen.
Can someone help or guide me in the right direction.
Thank you in advance.
Blacklist screenshot
Why don't you just replace that IP with a different one ? You will have to restart the VM

Banning an ip to visit a particular page

I am making a forum for a project. I wish the users to be anonymous to the public but want to store their ip addresses in my database so that I can block them if they pass any derogatory remarks or vulgar content on the forum. Once a user is blacklisted, he/she cannot make a post request to the forum. So they cannot post. What are the possible flaws in this project? And how do I come over this solution. Thanks in advance.
Blocking a user by blocking their IP address is not feasible. IP address that users use will change frequently . Even if they don't change, once you block the IP, they will change the IP immediately.
A better way would always be to have users register and then use the account to post anything. But, of course don't show their name or any details in the post. Don't link the user posting the content to any user profile. Only if they post anything which don't meet your posting guideline, just block the user.
You might also need privacy policies and user policies to provide privacy to users, if you are creating that kind of forum.
How do I block an IP address?
You can add this to your .htaccess
If you don't know what a .htaccess file is, it's a file you put in a folder of your website. It's just called ".htaccess". You can put these files in folders, and they will apply to the files of the folder that they are in, and any sub folders. This will only apply to some servers, so you could ask your web host for more information.
Anyway, pop this into that .htaccess file, and replace "x.x.x.x" with a real IP address:
Order Deny,Allow
Deny from x.x.x.x
Deny from y.y.y.y
Deny from z.z.z.z
# repeat these lines as necessary
How well does it work?
How effective this method actually is is hard to define, because ISPs constantly change IP addresses. This is one reason why hosting a website on a home internet connection can be difficult. Also, if someone's IP address is blocked, they could just use a different internet connection or use a VPN.

In Urbancode Deploy, what is the impact of changing the External Agent URL, from IP to hostname?

I have a UCD server, where the External Agent URL is an IP address 9.x. One of the users has requested to change that IP to a hostname, reason being that his agent can't reach that IP because that segment (9.x) is blocked, but they can reach it using the hostname because the agent can use a different route.
What will be the impact to the agents connected to that server if I change the External Agent URL ? Will they need to be updated too ?
I forgot to update before this question. After a discussion with a developer, I found out there is no impact in changing the IP address for the URL. This is transparent for the agents, and they don't need to be updated in any form.
I wanted to provide this update in case someone find it useful in the future.
Regards

Put Page Name before URL

I'm making a web application and i'm just wondering about the domain name. I want it like google does it where its like maps.google instead of google . com / maps
How do i do this when buying a domain?
These are called subdomains.
Any URL you buy can have any subdomain by adding a DNS record.
So if you buy example.com, you already have anything.example.com.
I suggest you read up on DNS a bit. This should get you started.
You can do it by creating subdomians via using your control panel
There are a few different levels of domain when it comes to DNS.
The first level is the top domain level. You cannot buy the top domain as they are the base of all domains and include the infamous .com or .org.
The second level is the one you can buy. You buy a domain related to a first level domain. So if you wanted akashkodesia.com you need to make sure it is available on the .com top domain and try to buy it.
Once you bought a domain, the subsequent levels are up to you. You can create whatever you want without asking anyone. Of course you have the restriction of the DNS protocol which is up to 255 characters total for your complete DNS name including dots.

way to get rough user location without browser pop-up permission

Is it possible to find the rough location of a user on the web without using the html5 geolocation stuff which brings up a box asking for the user's permission? I have tried MaxMind but it seems pretty poor.
Your webserver (apache or somethigng like that) gets the users IP-adress when he sends a request to your server. There are some services in the web that can tell you the country and city of that address. Google for "location from ip address" to find those services. That is the best you can do without asking the user.
Everything more accurate MUST be explicitely allowed by the user himself for legal reasons. If a user finds out that you are tracking his position without having asked him, you can go to jail!!
I've used IPlocation.net They provide a list of several providers and test them against your own IP to see if they get it correct.
I personally went with IPinfo.io