Naxsi is blocking traffic even though learningmode is enabled.

nbs-system / naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

GNU General Public License v3.0

4.8k stars 606 forks source link

Naxsi is blocking traffic even though learningmode is enabled. #416

Closed melaraj2 closed 6 years ago

melaraj2 commented 6 years ago

I am completely confused, I have installed Naxsi and it is running in learningmode. I am slowly analyzing the log and adding rules. But as soon as I add new custom rules, naxsi is blocking traffic. Why?? I wanted to stay in learning mode until I have added all of my rules, and decided that they are good enough. Am I misunderstanding the learning mode option?

buixor commented 6 years ago

Hello, Can you provide more info on what happens, like logs ? The only things that might be blocking in learning-mode are :

explicit black-list rules that use the DROP action
internal rules related to naxsi unability to parse incoming request