OPNsense Forum

English Forums => Web Proxy Filtering and Caching => Topic started by: Baconrind on February 09, 2024, 03:01:58 PM

Title: Nginx WAF issues
Post by: Baconrind on February 09, 2024, 03:01:58 PM
I've setup Nginx and all works in learning mode, when I disable learning it triggers a NAXSI block rule. I'm new to this and wondered if someone can point me to how to fix? im guessing its something to do with graphql and is the id0 value tye rule triggered?

Best
dean

*600 NAXSI_FMT: ip=x.x.x.x&server=yyyyy.com&uri=/graphql&config=block&rid=06f3d833686d5de400f89b97f9a9109f&cscore0=$policy0854ccca062b43d1954f4acadc31453d&score0=932&zone0=BODY&id0=1205&var_name0=query, client: 80.4.11.227, server: yyy.yyy.com, request: "POST /graphql HTTP/2.0", host: "yyy.com", referrer: "https://yyy.com/dashboard"
Title: Re: Nginx WAF issues
Post by: m2e on February 21, 2024, 09:13:04 AM
Rule ID 1205 (id0=1205) helps you to understand the reason.
You can whitelist this rule, by creating a whitelist policy adding this particular rule and assign it to the location (see screenshot).