Acl not matching if using url_dec

@sforsyt wrote:

Hi,

Trying to make ACL rules to match common script kiddie scans, which go through a variety of similar urls.
given urls like
/phpmyadmin/setup.php
/myadmin/scripts/setup.php

This works

    acl restricted_pages path_sub -i myadmin
    http-request deny if restricted_pages

This does not

    acl restricted_pages path_sub,url_dec -i myadmin
    http-request deny if restricted_pages

Is there anyway to use the two together?

Thanks

Posts: 1

Participants: 1

Read full topic