I have uploaded my website in my IIS using static IP. whenever I access it from local or remote it was showing "not secure".   How do I resolve this issue?
122136
I've called GoDaddy a few different times and they said that it looks like it is a problem with my HTML file.  Except, my HTML file is the basic outline of a webpage, nothing fancy at all.    Chrome still says that the webpage is, "Not Secure" with the big red x over it.    I'm not sure what to do to fix it, I don't have any personal information on the site nor am I collecting any information from visitors (it's sort of an information site).  I shouldn't need an SSL certificate because I am not hosting anything privately.
73312
I have a static IP and hosted my site in this.Working fine. But I want to change the URL name (static IP) to a domain name. I have one domain name already registered.  I have http://xx.xx.xx.xx/ but I want to use something like http://www.mydomain.com  How can I achieve this?
59364
We have a busy website where we never used SSL. Recently its indexed by Google as https://www.example.com.  The users are getting security certificate errors.   In google webmaster tools we can only remove the relative URL. For example, any thing after http://www.example.com.   I am using IIS 6.0 to host the site .net website.   I have seen similar posts here and there and almost all of them recommend a redirect. I don't want to set up a redirect as it will slow down the site loading. I guess I would also need to setup a new website on IIS  with HTTPS protocol and then do the redirect to HTTP site?
71920
I'm trying to block a range of IP that is sending tons of spam to my blog. I can't use the solution described  because it's a shared hosting and I can't change anything to the server configuration. I only have access to a few options in Remote IIS.  I see that the URL Rewrite module has an option to block requests, so I tried to use it. My rule is as follows in web.config:              &lt;rule name="BlockSpam" enabled="true" stopProcessing="true"&gt;                 &lt;match url=".*" /&gt;                 &lt;conditions logicalGrouping="MatchAll" trackAllCaptures="false"&gt;                     &lt;add input="{REMOTE_ADDR}" pattern="10\.0\.146\.23[0-9]" ignoreCase="false" /&gt;                 &lt;/conditions&gt;                 &lt;action type="CustomResponse" statusCode="403" /&gt;             &lt;/rule&gt;   Unfortunately, if I put it at the end of the rewrite rules, it doesn't seem to block anything... and if I put it at the start of the list, it blocks everything! It looks like the condition isn't taken into account.  In the UI, the stopProcessing option is not visible and is true by default. Changing it to false in web.config doesn't seem to have any effect.  I'm not sure what to do now... any ideas?
105640
Possible Duplicate:          I have a bunch of windows computers and due to a monitoring need I need to check their (static) ip address history.   When the user changes the ip address is there anywhere the ip address gets saved, logged or cached in any form at all? (I don't even need times, the simple ip address would do)
103443
Any site that I visit can see my local IP (e.g. 192.168.1.102). Is there any reliable way to block this behavior? (browser setting, OS setting, router setting, etc.) I am particularity interested in Google Chrome and Mozilla Firefox, but any modern open source browser will do. If it is a browser plugin, it should be open source with a solid user base.  By reliable I mean, that I do not need to check the leakage again after every software update.  More info / what I have read so far:   There was a Chrome plugin that is not working anymore Local IP is obtained using JavaScript / WebRTC   Live Demo here:  Source code:   Firefox developers is not going to fix the leak (bug is open from 2014):  In Private / Incognito mode does not prevent this leak. If you use static IPs, and have non typical local IP (e.g. 10.66.77.88 or 192.168.212.121), then there is no need for . Your external IP + internal IP is perfect fingerprint.   Update 1: It is not duplicate of  - I want to prevent private / local IP leak, not disable all WebRTC.  Update 2: No, it is not related to header X-Forwarded-For (HTTP_X_FORWARDED_FOR), that is added when user/administrator chooses to do so. In my provided demo it is not your choice... It is Google's and Mozilla's choice to leak your private IP even when using private browsing mode.  Update 3: Ability to determine my local IP allows malicious JavaScript to quickly identify my local subnet and print on my local network printers from any website in the world without me doing anything.  This  finds my LAN printers using JavaScript.  Update 4: It is not a good idea to reveal private IP to every website. By seeing your private IP, for example 192.168.88.101, I can guess with very high probability that you are using MikroTik router. Also, I can track particular user event if user uses different browsers because local and remote IP stays the same for some time (hours or even days).
35973
Im trying to access a web service from a remote computer. I managed to access the web service from the browser. But Im getting HTTP 403 when I try to call the web service from the application.  Any idea why?
89290
I wish to know all the pros and cons about using these two methods. In particular the implications on web security.  Thanks.
87495
We've got a webserver running IIS. We'd like to run maybe a shared blog or something to keep track of information. Because of security issues, we'd like for that part to be only viewable from localhost so people have to remote in to use it.  So, to repeat my question, can part of a website be made viewable from localhost only?
73488
I have a random domain name which has it's A record going to my dedicated IP. Therefore duplicating content. Is there a way I can disable the domain at IP level maybe in iptables?  I have a .htaccess setup to redirect to the main domain as its always force HTTPS.
56235
I have set up a local site under IIS 7.5 under port 900. to access it I should type localhost:900 in the address bar. I'm a little bit familiar with the System32\Drivers\etc\hosts file and I know I can define my custom name with IP adderss there. For example I can add: 127.0.0.1 MyLocalSite and whenever I type in http://MyLocalSite in the browser, The DNS resolves its IP as 127.0.0.1. Is there anyway that I can specify port number in that file as well? (e.g. 127.0.0.1:900 MySecondSite and the DNS resolves it correctly) I tried 127.0.0.1:900 and 127.0.0.1::900 with no luck.
109396
apt-get fail to resolve the mirror. I am using my server as a backup server to one of my website servers. So I had to initially set a static IP address... How can I do it?
56009
I have IIS7 on my computer, and I can access it through other computers in my house on the same network through my computer's IP address - 192.168.1.10x  Instead of typing in http : //192.168.1.10x/ I want to be able to go to http : //somename/  I know you can change the hosts file to add it but I'd have to do that on each computer and I'd still have to type in the IP to access it from my iPod/Wii... etc.
68923
Im trying to keep away some attackers that try to exploit XSS vulnerabilities from my website, I have found that most of the malicious attempts start with a classic "alert(document.cookie);\" test. The site is not vulnerable to XSS but I want to block the offending IP addresses before they found a real vulnerability, also, to keep the logs clean.  My first thought is to have a script constantly checking in the Apache logs all IP addresses that start with that probe and send those addresses to an iptables drop rule. With something like this:  cat /var/log/httpd/-access_log | grep "alert(document.cookie);" | awk '{print $1}' | uniq  Why would be an effective way to send the output of that command to iptables?  Thanks in advance for any input!
56653
Can someone please tell me how to restrict SSH access only to certain IP ranges (e.g. local network) and not the whole Internet? I guess this has to be done via firewall.
117159
For an ASP.NET C# application, we will need to restrict access based on IP address. What is the best way to accomplish this?
80473
When I visit , any web browser I use considers the URL to be secure.  This is what Google Chrome shows:    Normally, when I try to visit an HTTPS site via its IP address, I get a security warning like this:    From my understanding, the site certificate needs to match the domain, but the Google Chrome Certificate Viewer does not show 1.1.1.1:     says:     No - we no longer accept certificate requests for either intranet names or IP addresses. This is an industry-wide standard, not one specific to GoDaddy.   (emphasis mine)  And also:     As a result, effective October 1, 2016, Certification Authorities (CAs) must revoke SSL certificates that use intranet names or IP addresses.   (emphasis mine)  And:     Instead of securing IP addresses and intranet names, you should reconfigure servers to use Fully Qualified Domain Names (FQDNs), such as www.coolexample.com.   (emphasis mine)  It's well after the mandatory revocation date 01 October 2016, yet the certificate for 1.1.1.1 was issued on 29 March 2018 (shown in the screenshot above).    How is it possible that all the major browsers think that  is a trusted HTTPS website?