From 78f288e058bf690c05dc5694feb59da4c9342003 Mon Sep 17 00:00:00 2001
From: "srvproxy001.itguys.com.br" <srvproxy001.itguys.com.br@itguys.com.br>
Date: Tue, 16 Sep 2025 15:10:54 -0300
Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?=
 =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?=
 =?UTF-8?q?5-09-16=2015:10:54?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nginx/modsecurity/zabbix-rule-exceptions.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/nginx/modsecurity/zabbix-rule-exceptions.conf b/nginx/modsecurity/zabbix-rule-exceptions.conf
index 92fdb06..1b506a7 100644
--- a/nginx/modsecurity/zabbix-rule-exceptions.conf
+++ b/nginx/modsecurity/zabbix-rule-exceptions.conf
@@ -3,3 +3,10 @@
 # A expressão regular (jsrpc\.php|zabbix\.php) significa "jsrpc.php OU zabbix.php".
 SecRule REQUEST_URI "@rx (jsrpc\.php|zabbix\.php)" \
     "id:1001,phase:1,nolog,allow,ctl:ruleEngine=Off"
+
+# Desativa as regras específicas que causam falsos positivos na página de Descoberta de Hosts.
+# Lembre-se de substituir os IDs abaixo pelos que encontrou no seu log de auditoria.
+<LocationMatch "/zabbix/host_discovery.php">
+    SecRuleRemoveById 9XXXXX
+    SecRuleRemoveById 9YYYYY
+</LocationMatch>