관리-도구
편집 파일: 419-REQUEST-BLOCKING-EVALUATION-BN.conf
SecRule TX:INBOUND_ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" \ "phase:logging,\ id:1010000,\ t:none,\ auditlog,\ pass,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'" SecRule TX:OUTBOUND_ANOMALY_SCORE "@ge %{tx.outbound_anomaly_score_threshold}" \ "phase:logging,\ id:1010020,\ t:none,\ auditlog,\ pass,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'" SecRule TX:BN_INBOUND_FOUND "@gt 0" \ "phase:logging,\ id:1010030,\ t:none,\ auditlog,\ pass,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'" SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \ "phase:4,\ id:1010045,\ t:none,\ auditlog,\ redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'" SecRule TX:BN_INBOUND_FOUND "@gt 0" \ "phase:2,\ id:1010035,\ t:none,\ auditlog,\ redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'" SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \ "phase:logging,\ id:1010040,\ t:none,\ auditlog,\ pass,\ msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"