WAF rules applying to requests it shouldn't be?

Heres a rule I have to skip some of the other rules:

(ip.src.asnum eq 15169) or (http.request.uri.path eq "/robots.txt") or (starts_with(http.request.full_uri, "https://core.catt0s.win/.well-known/")) or (http.user_agent contains "Discordbot" and http.request.uri.path eq "/.well-known/discord") or (ip.src.asnum eq 132892)

(ip.src.asnum eq 15169) or (http.request.uri.path eq "/robots.txt") or (starts_with(http.request.full_uri, "https://core.catt0s.win/.well-known/")) or (http.user_agent contains "Discordbot" and http.request.uri.path eq "/.well-known/discord") or (ip.src.asnum eq 132892)

(ip.src.asnum eq 15169) or (http.request.uri.path eq "/robots.txt") or (starts_with(http.request.full_uri, "https://core.catt0s.win/.well-known/")) or (http.user_agent contains "Discordbot" and http.request.uri.path eq "/.well-known/discord") or (ip.src.asnum eq 132892)

(ip.src.asnum eq 15169) or (http.request.uri.path eq "/robots.txt") or (starts_with(http.request.full_uri, "https://core.catt0s.win/.well-known/")) or (http.user_agent contains "Discordbot" and http.request.uri.path eq "/.well-known/discord") or (ip.src.asnum eq 132892)

The request in the picture says it got skipped thanks to this rule, along with many similar ones. Why would this be?

No replies yetBe the first to reply to this messageJoin

WAF rules applying to requests it shouldn't be?

Similar Threads

Similar Threads

Similar Threads