File: //opt/bitninja-waf/etc/BitNinja/419-REQUEST-BLOCKING-EVALUATION-BN.conf
SecRule TX:INBOUND_ANOMALY_SCORE "@ge %{tx.inbound_anomaly_score_threshold}" \
"phase:logging,\
id:1010000,\
t:none,\
auditlog,\
pass,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:OUTBOUND_ANOMALY_SCORE "@ge %{tx.outbound_anomaly_score_threshold}" \
"phase:logging,\
id:1010020,\
t:none,\
auditlog,\
pass,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_INBOUND_FOUND "@gt 0" \
"phase:logging,\
id:1010030,\
t:none,\
auditlog,\
pass,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \
"phase:4,\
id:1010045,\
t:none,\
auditlog,\
redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_INBOUND_FOUND "@gt 0" \
"phase:2,\
id:1010035,\
t:none,\
auditlog,\
redirect:ls2srSZyZap38kaks97eDsC8VPwxKGGx7MltG5rZUAJbWqj76wpQOcDZWV2fzZ6K5sO3pgHYvneCuCxZRASR43tOJjxmJzjJCAqW/403.html,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"
SecRule TX:BN_OUTBOUND_FOUND "@gt 0" \
"phase:logging,\
id:1010040,\
t:none,\
auditlog,\
pass,\
msg:'Pattern [%{tx.bn_pattern}]',logdata:'LogPattern [%{tx.bn_pattern}]'"