HTML Extension
Changes all .htm requests to .html
Condition:
· Condition = Path
· Sense = Does
· Check = Match RegEx
· Value = \.htm$
Evaluation:
· Blank
Action:
· Action = Rewrite Path
· Target = $path$l
Index.html
Force to use index.html in requests to folders.
Condition: this condition is a general condition that will match most objects
· Condition = Host
· Sense = Does
· Check = Exist
Evaluation:
· Blank
Action:
· Action = Redirect 302
· Target = HTTP://$host$$path$index.html$querystring$
Close Folders
Deny requests to folders.
Condition: this condition is a general condition that will match most objects
· Condition = this need proper thought
· Sense =
· Check =
Evaluation:
· Blank
Action:
· Action =
· Target =
Hide CGI-BBIN:
Hides cgi-bin catalogue in requests to CGI scripts.
Condition: this condition is a general condition that will match most objects
· Condition = Host
· Sense = Does
· Check = Match RegEX
· Value = \.cgi$
Evaluation:
· Blank
Action:
· Action = Rewrite Path
· Target = /cgi-bin$path$
Log Spider
Log spider requests of popular search engines.
Condition: this condition is a general condition that will match most objects
· Condition = Request Header
· Match = User-Agent
· Sense = Does
· Check = Match RegEX
· Value = Googlebot|Slurp|bingbot|ia_archiver
Evaluation:
· Variable = $crawler$
· Source = Request Header
· Detail = User-Agent
Action:
· Action = Log Event
· Target = [$crawler$] $host$$path$$querystring$
Force HTTPS
Force to use HTTPS for certain directory. In this case if a client is accessing anything containing the /secure/ directory then they will be redirected to the HTTPs version of the URL requested.
Condition:
· Condition = Path
· Sense = Does
· Check = Contain
· Value = /secure/
Evaluation:
· Blank
Action:
· Action = Redirect 302
· Target = HTTPs://$host$$path$$querystring$
Media Stream:
Redirects Flash Media Stream to appropriate service.
Condition:
· Condition = Path
· Sense = Does
· Check = End
· Value = .flv
Evaluation:
· Blank
Action:
· Action = Redirect 302
· Target = HTTP://$host$:8080/$path$
Swap HTTP to HTTPS
Change any hardcoded HTTP:// to HTTPS://
Condition:
· Condition = Response Code
· Sense = Does
· Check = Equal
· Value = 200 OK
Evaluation:
· Blank
Action:
· Action = Body Replace All
· Target = HTTP://
· Data = HTTPs://
Blank out Credit Cards
Check that there are no credit cards in the response and if one is found, blank it out.
Condition:
· Condition = Response Code
· Sense = Does
· Check = Equal
· Value = 200 OK
Evaluation:
· Blank
Action:
· Action = Body Replace All
· Target = [0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+-[0-9]+[0-9]+[0-9]+[0-9]+
· Data = xxxx-xxxx-xxxx-xxxx
Content Expiry
Add a sensible content expiry date to the page to reduce the number of requests and 304s.
Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your
· Condition = Response Code
· Sense = Does
· Check = Equal
· Value = 200 OK
Evaluation:
· Blank
Action:
· Action = Add Response Header
· Target = Cache-Control
· Data = max-age=3600
Spoof Server Type
Get the Server type and change it to something else.
Condition: this is a generic condition as a catch all. It is recommended to focus this condition on your
· Condition = Response Code
· Sense = Does
· Check = Equal
· Value = 200 OK
Evaluation:
· Blank
Action:
· Action = Replace Response Header
· Target = Server
· Data = Secret
Never Send Errors
Client never gets any errors from your site.
Condition
· Condition = Response Code
· Sense = Does
· Check = Contain
· Value = 404
Evaluation
· Blank
Action
· Action = Redirect 302
· Target = HTTP//$host$/
Redirect on Language
Find the language code and redirect to the related country domain.
Condition
· Condition = Language
· Sense = Does
· Check = Contain
· Value = German (Standard)
Evaluation
· Variable = $host_template$
· Source = Host
· Value = .*\.
Action
· Action = Redirect 302
· Target = HTTP//$host_template$de$path$$querystring$
Google Analytics
Insert the code required by Google for the analytics – Please change the value MYGOOGLECODE to your Google UA ID.
Condition
· Condition = Response Code
· Sense = Does
· Check = Equal
· Value = 200 OK
Evaluation
· blank
Action
· Action = Body Replace Last
· Target = </body>
· Data = <script
type=’text/javascript’> var _gaq = _gaq || []; _gaq.push([‘_setAccount’, ‘MY GOOGLE CODE’]); _gaq.push([‘_trackPageview’]); ( function() { var ga = document.createElement(‘script’); ga.type = ‘text/javascript’; ga.async = true; ga.src = (‘HTTPs’ == document.location.protocol ?‘HTTPs//ssl’ ‘HTTP//www’) + ‘.google-analytics.com/ga.js’; var s = document.getElementsByTagName(‘script’)[0];s.parentNode.insertBefore(ga, s); } )(); </script> </body>
IPv6 Gateway
Adjust Host Header for IIS IPv4 Servers on IPv6 Services. IIS IPv4 servers do not like to see an IPV6 address in the host client request so this rule replaces this with a generic name.
Condition
· blank
Evaluation
· blank
Action
· Action = Replace Request Header
· Target = Host
· Data =ipv4.host.header
