nginx ngx_waf模块---自定义拦截规则

修改 白名单规则（naxsi_mysite.rules）：

红色为新增白名单规则

SecRulesEnabled;
DeniedUrl "/RequestDenied";
CheckRule "$SQL >= 8" BLOCK;
CheckRule "$RFI >= 8" BLOCK;
CheckRule "$TRAVERSAL >=4" BLOCK;
CheckRule "$EVADE >= 4" BLOCK;
CheckRule "$XSS >= 8" BLOCK;
CheckRule "$LIUZW>= 8" BLOCK;

修改 配置 naxsi_core.rules ：

#############################
## log4j bug   ID: 2402-2499 ######
#############################
MainRule "str:jndi:ldap" "msg:log4j" "mz:URL|ARGS|BODY" "s:$LIUZW:8" id:2402;
MainRule "str:jndi:rmi" "msg:log4j" "mz:URL|ARGS|BODY" "s:$LIUZW:8" id:2303;

然后对nginx重启即可。