1#@!#!123s

: / opt / bitninja-waf / etc / BitNinja /
Filename : 419-REQUEST-BLOCKING-EVALUATION-BN.conf
back
SecRule TX:INBOUND_ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" \
        "phase:logging,\
        id:1010000,\
        t:none,\
        auditlog,\
        pass,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:OUTBOUND_ANOMALY_SCORE "@ge %{tx.outbound_anomaly_score_threshold}" \
            "phase:logging,\
            id:1010020,\
        t:none,\
        auditlog,\
        pass,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_INBOUND_FOUND "@gt 0" \
        "phase:logging,\
        id:1010030,\
        t:none,\
        auditlog,\
        pass,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \
        "phase:4,\
        id:1010045,\
        t:none,\
        auditlog,\
        redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_INBOUND_FOUND "@gt 0" \
        "phase:2,\
        id:1010035,\
        t:none,\
        auditlog,\
        redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \
        "phase:logging,\
        id:1010040,\
        t:none,\
        auditlog,\
        pass,\
        msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"