پاسخ : بستن امکان استفاده از اسکریپت رپیدلیچ در سرور
این رول هارو تست کنید :
SecRule RESPONSE_BODY "(?:<b>rapidleech checker script|rapidleech plugmod - auto download|<title>rapidleech|You are not allowed to leech from|alt=\"rapidleech plugmod|<center>.*<a href=http://www\.rapidleech\.com>rapidleech</a>|src=\"http://www\.rapidleech\.com/logo\.gif)" \
"phase:4,t:lowercase,ctl:auditLogParts=+E,auditlog ,status:404,msg:'Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Unauthorized Download Client - Rapidleech',id:'390900',rev:8,severity:'2'"
SecRule RESPONSE_HEADERS:WWW-Authenticate "basic realm.*rapidleech" \
"capture,phase:3,ctl:auditLogParts=+E,auditlog,sta tus:404,msg:'Atomicorp.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Unauthorized Download Client - Rapidleech',id:'390903',rev:1,severity:'2',logdata :'%{TX.0}'"
SecRule ARGS_POST "^(ht|f)tps?://([a-z0-9_\.?]+\.)?((rapidshare|mega(?:upload|shares?)|filefacto ry|mediafire|depositfiles|sendspace|badongo|upload ing|savefile|cocshare|axifile|turboupload|gigasize |ziddu|uploadpalace|filefront|momupload|speedyshar e|rnbload|adrive|easy-share|megarotic|egoshare)\.com|ifolder\.ru|files\. to|cocoshare\.cc|(?:usaupload|bitroad)\.net|netloa d\.in|rapidshare\.de)/.+" \
"capture,id:390902,rev:1,severity:2,msg:'Atomicorp .com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Possible Unauthorized Download Client',logdata:'%{TX.0}'"
#SecRule ARGS_POST "^http://(rapidshare|megaupload)\.com.+" \
#"capture,id:390901,rev:1,severity:2,msg:'Atomicor p.com - FREE UNSUPPORTED DELAYED FEED - WAF Rules: Unauthorized Download Client - Rapidleech',logdata:'%{TX.0}'"
پاسخ با نقل قول