Forum Discussion

Sajid's avatar
Sajid
Icon for Cirrostratus rankCirrostratus
Apr 19, 2020

How to protect Contact Form from spam?

Hi Guys,

 

Is there any solution from F5 to protect Contact Form from spam input?

 

I have tried ASM custom banned words, but it's not working.

 

any good solution?

 

Regards,

Sajid

ASM Advanced WAF
LTM
security
  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Apr 21, 2020

    You can use several approaches to protect it:

    1. As I said before, you can configure bot profile, to protect you application from bots.
    2. You can define appropriate parameter "name" in policy with some restrictions, like "Email" data type or aplha-numeric data type with maximum length (e.g. 50 characters) or with some regex rule or with some disallowed metacharacters
    3. You can create special valuecontent signature with special rule, which will match bad pattern

     

    Thanks, Ivan

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Apr 21, 2020

    You can use several approaches to protect it:

    1. As I said before, you can configure bot profile, to protect you application from bots.
    2. You can define appropriate parameter "name" in policy with some restrictions, like "Email" data type or aplha-numeric data type with maximum length (e.g. 50 characters) or with some regex rule or with some disallowed metacharacters
    3. You can create special valuecontent signature with special rule, which will match bad pattern

     

    Thanks, Ivan

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Apr 21, 2020

    Hello Sajid,

     

    Could you provide any example of what you want to protect and from what inputs?

    If you want to protect Form from input from bots, then you can use bot profile for you application, which was introduced in ASM starting from v13.0.0.

     

    Thanks, Ivan

  • Sajid's avatar
    Sajid
    Icon for Cirrostratus rankCirrostratus
    Apr 21, 2020

    Hi Ivan,

     

    This kind of data getting from contact us form.

     

    name=611__***ХОТИТЕ+ЗАРАБОТАТЬ+100000р.?+ЧИТАЙТЕ+ПОДРОБНОСТИ:+https://is.gd/JBvrvY++***__478&email=dmitrii.golub@mail.ru&contactnumber=249223&comment=544397&submit=?????

     

     

    Regards,

    Sajid