[HTTP]
UnescapeURL=1
Ports=80
DenyMethodsNotInAllowedList=1
OnMethodDenialReport=1
OnMethodDenialBanIp=1
DenyExtensionsNotInAllowedList=1
OnExtensionDenialReport=1
OnExtensionDenialBanIp=1

[HTTP.UnescapeDoubleCheck]
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.AllowHighBitCharacters]
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.MaxUrlLength]
Deny=1
OnDenialReport=1
OnDenialBanIp=1
MaximumLength=2000

[HTTP.Allowed.Methods]
GET=
HEAD=
POST=

[HTTP.Deny.Methods]
CONNECT=
DELETE=
LOCK=
OPTIONS=
PROPFIND=
PUT=

[HTTP.Allowed.Extensions]
ACH=
ASP=
ASPX=
BMP=
CFM=
CFML=
CGI=
CSS=
DAT=
DOC=
EPS=
GIF=
HTM=
HTML=
ICO=
JPEG=
JPG=
JS=
PDF=
PHP=
PL=
PNG=
SWF=
TXT=
XML=

[HTTP.Deny.Extensions]
APX=
BAT=
CMD=
COM=
EXE=
HTW=
IDA=
IDQ=
INI=
PRINTER=
AXD=

[HTTP.Deny.URLSequences.1]
String=SYSTEM32
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.2]
String=CMD.EXE
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.3]
String=%
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.4]
String=\
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.5]
String=./
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.6]
String=..
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.7]
String=/index.jsp%00x
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.8]
String=<img%src="javascript:alert(document.cookie)">
Deny=1
OnDenialReport=1
OnDenialBanIp=1

[HTTP.Deny.URLSequences.9]
String=%2E%2E/%2E%2E/%2E%2E/%2E%2E/%2E%2E/windows/boot.ini
Deny=1
OnDenialReport=1
OnDenialBanIp=0