Custom Rules

Introduction

The "Custom Rules" feature of the creoline WAF allows you to tailor the WAF's behavior to your specific needs. Create your own rules to automatically allow or block requests based on various criteria.

Prerequisites

• creoline WAF

Definitions

Rule

A rule is a collection of so-called “OR groups” that, when satisfied, trigger a specific action. The action consists of either allowing, denying, or redirecting a request to a JavaScript challenge. The selected action is always applied whenever at least one “or group” of the respective rule is satisfied.

“Or” Group

An “Or” group is a collection of so-called “conditions.”

An “Or group” is considered met if all conditions within that group occur simultaneously. If only some of the conditions in the “Or group” occur, the group is not considered met. Consequently, no action is triggered.

Conditions

A condition refers to a specific prerequisite that must be met.

Within an “Or” group, multiple conditions can be linked together to represent complex requirements for the respective rule.

A condition is defined by a condition type, an operator, and a value.

The following condition types are currently supported:

• ASN
• IP address
• Path
• User-Agent
• Country
• Continent
• Method

Rule Management

Log in to your customer account at app.creoline.com and navigate to the menu item Web Application Firewall → Name of your instance → Custom Rules to configure or modify your custom rules.

Add

Click Add Rule in the upper-right corner and specify a name, a description, and the desired action to be performed when the rule is triggered.

Clicking Add Rule creates the rule and automatically generates an initial "Or" group. You can add additional "Or" groups by clicking Add "Or" Group.

Within an "Or" group, define the conditions that must be met for the "Or" group to apply.

The "Or" group applies when all conditions within the "Or" group are met simultaneously.

Edit Rule

To edit a rule, click the name of the rule you want to edit.

Click the pencil icon on the right-hand side to edit an "Or" group or the conditions within an "Or" group.

Remove Rule

To remove a rule, click the name of the rule you want to edit, then click Settings → Remove Rule.

You can also remove a specific "Or" group or a condition within an "Or" group by clicking the red trash can icon.

Rule Objects

List of Countries and Continents

https://de.wikipedia.org/wiki/ISO-3166-1-Kodierliste