修改 白名单规则(naxsi_mysite.rules):
红色为新增白名单规则
SecRulesEnabled;
DeniedUrl "/RequestDenied";
CheckRule "$SQL >= 8" BLOCK;
CheckRule "$RFI >= 8" BLOCK;
CheckRule "$TRAVERSAL >=4" BLOCK;
CheckRule "$EVADE >= 4" BLOCK;
CheckRule "$XSS >= 8" BLOCK;
CheckRule "$LIUZW>= 8" BLOCK;
修改 配置 naxsi_core.rules :
#############################
## log4j bug ID: 2402-2499 ######
#############################
MainRule "str:jndi:ldap" "msg:log4j" "mz:URL|ARGS|BODY" "s:$LIUZW:8" id:2402;
MainRule "str:jndi:rmi" "msg:log4j" "mz:URL|ARGS|BODY" "s:$LIUZW:8" id:2303;
然后对nginx重启即可。