# Block/remove access of files **URL:** \ **Category:** Kibana\ **Created:** [May 15, 2020, 5:18am UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755 "2020-05-15T05:18:00Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![ravi\_yadav2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ravi_yadav2/32/61530_2.png) [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Post date:** [May 15, 2020, 5:18am UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/1 "2020-05-15T05:18:00Z")
Hi Team, In dashboard, found that default files of kibana, elastic search are present in the box which are directly accessible from browser. [https://server/kibana/README.txt](https://server/kibana/README.txt) [https://server/kibana/LICENSE.txt](https://server/kibana/LICENSE.txt) [https://server/proxy/ui/fonts/inter\_ui/LICENSE.txt](https://server/proxy/ui/fonts/inter_ui/LICENSE.txt) Please help me to make above url inaccessible . ---
**Author:** ![Mikhail\_Shustov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikhail_shustov/32/49186_2.png) [@Mikhail\_Shustov](https://discuss.elastic.co/u/Mikhail_Shustov)\ **Post date:** [May 15, 2020, 9:18am UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/2 "2020-05-15T09:18:25Z")
@ravi_yadav2 In what Kibana version you experience the problem with README.txt being exposed? Regarding LICENSE.txt: some OSS products, that we use, require to be distributed with the license file. You might set up your reverse proxy to limit access to any resources in your network. ---
**Author:** ![ravi\_yadav2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ravi_yadav2/32/61530_2.png) [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Post date:** [May 15, 2020, 1:02pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/3 "2020-05-15T13:02:46Z")
I am working with Kibana version 7.4.2 ---
**Author:** ![Mikhail\_Shustov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikhail_shustov/32/49186_2.png) [@Mikhail\_Shustov](https://discuss.elastic.co/u/Mikhail_Shustov)\ **Post date:** [May 15, 2020, 2:44pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/4 "2020-05-15T14:44:55Z")
I checked artifacts and found only one README.txt in the Kibana root folder, which shouldn't be served. Are you sure Kibana serves them? Do you have any reverse proxy (Nginx maybe?) running? You can verify this by stopping Kibana and being able to load the files. ---
**Author:** ![ravi\_yadav2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ravi_yadav2/32/61530_2.png) [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\ **Post date:** [May 15, 2020, 5:40pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/5 "2020-05-15T17:40:11Z")
Yes , After stopping kibana i am able to access below two files [https://server/kibana/README.txt](https://server/kibana/README.txt) [https://server/kibana/LICENSE.txt](https://server/kibana/LICENSE.txt) ---
**Author:** ![Mikhail\_Shustov](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikhail_shustov/32/49186_2.png) [@Mikhail\_Shustov](https://discuss.elastic.co/u/Mikhail_Shustov)\ **Post date:** [May 16, 2020, 1:19pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/6 "2020-05-16T13:19:37Z")
Then you have to tune your server (Apache, Nginx, etc.) to limit access only to specific resources. Otherwise, it can be a serious source of vulnerabilities. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 13, 2020, 1:19pm UTC](https://discuss.elastic.co/t/block-remove-access-of-files/232755/7 "2020-06-13T13:19:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.