From e4f53746d9ca7c8d816d39728aca1bf5e5a30dfc Mon Sep 17 00:00:00 2001 From: "srvproxy001.itguys.com.br" Date: Tue, 16 Sep 2025 10:31:55 -0300 Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?= =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?= =?UTF-8?q?5-09-16=2010:31:55?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- nginx/modsecurity.conf | 3 +++ nginx/modsecurity/zammad-rule-exceptions.conf | 7 +++++++ 2 files changed, 10 insertions(+) create mode 100644 nginx/modsecurity/zammad-rule-exceptions.conf diff --git a/nginx/modsecurity.conf b/nginx/modsecurity.conf index e363e2f..c6f24f5 100644 --- a/nginx/modsecurity.conf +++ b/nginx/modsecurity.conf @@ -293,3 +293,6 @@ Include /etc/nginx/modsecurity/zabbix-rule-exceptions.conf # Carrega as exceções personalizadas para o Exchange Include /etc/nginx/modsecurity/exchange-rule-exceptions.conf + +# Carrega as nossas exceções personalizadas para o Zammad. +Include /etc/nginx/modsecurity/zammad-rule-exceptions.conf diff --git a/nginx/modsecurity/zammad-rule-exceptions.conf b/nginx/modsecurity/zammad-rule-exceptions.conf new file mode 100644 index 0000000..74c06a1 --- /dev/null +++ b/nginx/modsecurity/zammad-rule-exceptions.conf @@ -0,0 +1,7 @@ +# Ficheiro de Exceções do ModSecurity para o Zammad + +# Desativa a regra 9XXXXX (que estava a causar um falso positivo) +# APENAS para as requisições destinadas à API da taskbar do Zammad. +# Isto mantém a regra ativa para o resto do site. +SecRule REQUEST_URI "@beginsWith /api/v1/taskbar" \ + "id:1004,phase:1,nolog,allow,ctl:ruleRemoveById=9XXXXX"