joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-10-03 09:21:01

This commit is contained in:
srvproxy001.itguys.com.br 2025-10-03 09:21:01 -03:00
parent 6c1d657288
commit e8074e2034
1 changed files with 3 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
nginx/modsecurity/global-exceptions.conf
View File

@ -12,26 +12,11 @@ SecRule REQUEST_URI "@beginsWith /remote.php" "id:10001,phase:1,nolog,pass,ctl:r
SecRule REQUEST_URI "@streq /.well-known/caldav" "id:10002,phase:1,nolog,pass,ctl:ruleEngine=Off"
SecRule REQUEST_URI "@streq /.well-known/carddav" "id:10003,phase:1,nolog,pass,ctl:ruleEngine=Off"
SecRule REQUEST_URI "@beginsWith /ocs/v2.php/apps/user_status/api/v1/heartbeat" \
"id:1001, \
phase:2, \
pass, \
nolog, \
ctl:ruleRemoveById=942100, \
msg:'TUNING: Falso-positivo de SQLi (942100) removido para a API de heartbeat'"
"id:1001,phase:2,pass,nolog,ctl:ruleRemoveById=942100,msg:'TUNING: Falso-positivo de SQLi (942100) removido para a API de heartbeat'"
SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/sort_favorites_first" \
"id:1002, \
phase:2, \
pass, \
nolog, \
ctl:ruleRemoveById=920420, \
msg:'TUNING: Falso-positivo de decodificacao (920420) removido para a API de config'"
"id:1002,phase:2,pass,nolog,ctl:ruleRemoveById=920420,msg:'TUNING: Falso-positivo de decodificacao (920420) removido para a API de config'"
SecRule REQUEST_URI "@beginsWith /apps/files/api/v1/config/show_hidden" \
"id:1003, \
phase:2, \
pass, \
nolog, \
ctl:ruleRemoveById=920350, \
msg:'TUNING: Falso-positivo de Host Header (920350) removido para a API de config'"
"id:1003,phase:2,pass,nolog,ctl:ruleRemoveById=920350,msg:'TUNING: Falso-positivo de Host Header (920350) removido para a API de config'"
# --------------------------------------------------------------------------
# Exceções para o Zabbix
# --------------------------------------------------------------------------