appsec-bot-challenge-exclude-monitoring WAF Configuration by crowdsecurity | CrowdSec Hub

appsec-bot-challenge-exclude-monitoring

WAF configuration

By: crowdsecurity
Version: 0.1

Install with a top-level collection

3 collections include it

sudo cscli collections install crowdsecurity/appsec-bot-challenge

Installs 2 parsers and 2 scenarios, via WAF - Bot Challenge Good Bots.

View WAF - Bot Challenge →

Installation

sudo cscli appsec-configs install crowdsecurity/appsec-bot-challenge-exclude-monitoring

Then reload CrowdSec: sudo systemctl reload crowdsec

Configuration

appsec-configs/crowdsecurity/appsec-bot-challenge-exclude-monitoring.yaml· 32 linesGitHub

1name: crowdsecurity/appsec-bot-challenge-exclude-monitoring
2# Skip the challenge for verified uptime/monitoring bots (matched against their published IP/rDNS ranges).
3# Do not edit this file to add your own exclusions, create a custom config.
4inband:
5  pre_eval:
6    - filter: MatchKnownBot(req.RemoteAddr, req.UserAgent(), req.URL.Path, "legit_bots/uptimerobot.json")
7      apply:
8        - ExemptFromChallenge("uptimerobot")
9    - filter: MatchKnownBot(req.RemoteAddr, req.UserAgent(), req.URL.Path, "legit_bots/cookiebot.json")
10      apply:
11        - ExemptFromChallenge("cookiebot")
12    - filter: MatchKnownBot(req.RemoteAddr, req.UserAgent(), req.URL.Path, "legit_bots/datadog.json")
13      apply:
14        - ExemptFromChallenge("datadog")
15    - filter: MatchKnownBot(req.RemoteAddr, req.UserAgent(), req.URL.Path, "legit_bots/pagerduty.json")
16      apply:
17        - ExemptFromChallenge("pagerduty")
18
19# Declares the datafiles so crowdsec downloads them.
20data:
21  - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/legit_bots/uptimerobot.json
22    dest_file: legit_bots/uptimerobot.json
23    type: bots
24  - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/legit_bots/cookiebot.json
25    dest_file: legit_bots/cookiebot.json
26    type: bots
27  - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/legit_bots/datadog.json
28    dest_file: legit_bots/datadog.json
29    type: bots
30  - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/legit_bots/pagerduty.json
31    dest_file: legit_bots/pagerduty.json
32    type: bots

Installed on

Know where it runs

Sign in to see the Security Engines that run this waf configuration, the version they run and whether it was modified locally.