Forum Discussion
Ilian_Ivanov
Nimbostratus
NimbostratusCustom Attack Signature for blocking XFF IPs
Hello,
Could you help me with writing a regular expression for custom attack signature that will check the XFF header for specific IP address and if there is a match block it.
Thank you in ...
Daniel_Varela
Employee
EmployeeDidn't have time to tested, the rule should look like:
re2:"/X-Forwarded-For:\s(84\.138\.39\.100|66\.55\.33\.64)/Hi";
You can add as many IPs as you need.
Update to escape dots :)