Refine WAF rules - Githubissues

CDLUC3 / dmptool

DMPTool version of the DMPRoadmap codebase

https://dmptool.org

MIT License

56 stars 13 forks source link

Open briri opened 2 weeks ago

briri commented 2 weeks ago

Review our WAF logs and the suggested rules from Github issue that will rate limit individual IPs that attempt to hit the same endpoints in rapid succession
Add rule to allow specific cgi-bin for our Shib endpoints only
Write scripts to help test these behaviors on Staging

briri commented 2 weeks ago

Consider adding the captcha rule (for non api endpoints)