JFIF $
d d 7
Viewing File: /home/optimaldigitaltr/public_html/src/config/firewall.php
<?php
return [
'enabled' => env('FIREWALL_ENABLED', true),
'whitelist' => explode(',', env('FIREWALL_WHITELIST', '')),
'models' => [
'user' => '\App\Models\User',
// 'log' => '\App\Models\YourLogModel',
// 'ip' => '\App\Models\YourIpModel',
],
'log' => [
'max_request_size' => 2048,
],
'cron' => [
'enabled' => env('FIREWALL_CRON_ENABLED', true),
'expression' => env('FIREWALL_CRON_EXPRESSION', '* * * * *'),
],
'responses' => [
'block' => [
'view' => env('FIREWALL_BLOCK_VIEW', null),
'redirect' => env('FIREWALL_BLOCK_REDIRECT', null),
'abort' => env('FIREWALL_BLOCK_ABORT', false),
'code' => env('FIREWALL_BLOCK_CODE', 403),
//'exception' => \Akaunting\Firewall\Exceptions\AccessDenied::class,
],
],
'notifications' => [
'mail' => [
'enabled' => env('FIREWALL_EMAIL_ENABLED', false),
'name' => env('FIREWALL_EMAIL_NAME', 'Laravel Firewall'),
'from' => env('FIREWALL_EMAIL_FROM', 'firewall@mydomain.com'),
'to' => env('FIREWALL_EMAIL_TO', 'admin@mydomain.com'),
'queue' => env('FIREWALL_EMAIL_QUEUE', 'default'),
],
'slack' => [
'enabled' => env('FIREWALL_SLACK_ENABLED', false),
'emoji' => env('FIREWALL_SLACK_EMOJI', ':fire:'),
'from' => env('FIREWALL_SLACK_FROM', 'Laravel Firewall'),
'to' => env('FIREWALL_SLACK_TO'), // webhook url
'channel' => env('FIREWALL_SLACK_CHANNEL', null), // set null to use the default channel of webhook
'queue' => env('FIREWALL_SLACK_QUEUE', 'default'),
],
],
'all_middleware' => [
'firewall.ip',
'firewall.agent',
'firewall.bot',
'firewall.geo',
'firewall.lfi',
'firewall.php',
'firewall.referrer',
'firewall.rfi',
'firewall.session',
'firewall.sqli',
'firewall.swear',
'firewall.xss',
//'App\Http\Middleware\YourCustomRule',
],
'middleware' => [
'ip' => [
'enabled' => env('FIREWALL_MIDDLEWARE_IP_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
],
'agent' => [
'enabled' => env('FIREWALL_MIDDLEWARE_AGENT_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
// https://github.com/jenssegers/agent
'browsers' => [
'allow' => [], // i.e. 'Chrome', 'Firefox'
'block' => [], // i.e. 'IE'
],
'platforms' => [
'allow' => [], // i.e. 'Ubuntu', 'Windows'
'block' => [], // i.e. 'OS X'
],
'devices' => [
'allow' => [], // i.e. 'Desktop', 'Mobile'
'block' => [], // i.e. 'Tablet'
],
'properties' => [
'allow' => [], // i.e. 'Gecko', 'Version/5.1.7'
'block' => [], // i.e. 'AppleWebKit'
],
'auto_block' => [
'attempts' => 2,
'frequency' => 1 * 60, // 1 minute
'period' => 30 * 60, // 30 minutes
],
],
'bot' => [
'enabled' => env('FIREWALL_MIDDLEWARE_BOT_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
// https://github.com/JayBizzle/Crawler-Detect/blob/master/raw/Crawlers.txt
'crawlers' => [
'allow' => [], // i.e. 'GoogleSites', 'GuzzleHttp'
'block' => [], // i.e. 'Holmes'
],
'auto_block' => [
'attempts' => 5,
'frequency' => 1 * 60, // 1 minute
'period' => 30 * 60, // 30 minutes
],
],
'geo' => [
'enabled' => env('FIREWALL_MIDDLEWARE_GEO_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'continents' => [
'allow' => [], // i.e. 'Africa'
'block' => [], // i.e. 'Europe'
],
'regions' => [
'allow' => [], // i.e. 'California'
'block' => [], // i.e. 'Nevada'
],
'countries' => [
'allow' => [], // i.e. 'Albania'
'block' => [], // i.e. 'Madagascar'
],
'cities' => [
'allow' => [], // i.e. 'Istanbul'
'block' => [], // i.e. 'London'
],
// ipapi, extremeiplookup, ipstack, ipdata, ipinfo, ipregistry, ip2locationio
'service' => 'ipapi',
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'lfi' => [
'enabled' => env('FIREWALL_MIDDLEWARE_LFI_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['get', 'delete'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
'#\.\/#is',
],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'login' => [
'enabled' => env('FIREWALL_MIDDLEWARE_LOGIN_ENABLED', env('FIREWALL_ENABLED', true)),
'auto_block' => [
'attempts' => 5,
'frequency' => 1 * 60, // 1 minute
'period' => 30 * 60, // 30 minutes
],
],
'php' => [
'enabled' => env('FIREWALL_MIDDLEWARE_PHP_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['get', 'post', 'delete'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
'bzip2://',
'expect://',
'glob://',
'phar://',
'php://',
'ogg://',
'rar://',
'ssh2://',
'zip://',
'zlib://',
],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'referrer' => [
'enabled' => env('FIREWALL_MIDDLEWARE_REFERRER_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'blocked' => [],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'rfi' => [
'enabled' => env('FIREWALL_MIDDLEWARE_RFI_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['get', 'post', 'delete'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
'#(http|ftp){1,1}(s){0,1}://.*#i',
],
'exceptions' => [],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'session' => [
'enabled' => env('FIREWALL_MIDDLEWARE_SESSION_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['get', 'post', 'delete'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
'@[\|:]O:\d{1,}:"[\w_][\w\d_]{0,}":\d{1,}:{@i',
'@[\|:]a:\d{1,}:{@i',
],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'sqli' => [
'enabled' => env('FIREWALL_MIDDLEWARE_SQLI_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['get', 'delete'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
'#[\d\W](union select|union join|union distinct)[\d\W]#is',
'#[\d\W](union|union select|insert|from|where|concat|into|cast|truncate|select|delete|having)[\d\W]#is',
],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'swear' => [
'enabled' => env('FIREWALL_MIDDLEWARE_SWEAR_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['post', 'put', 'patch'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'words' => [],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
'url' => [
'enabled' => env('FIREWALL_MIDDLEWARE_URL_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'inspections' => [], // i.e. 'admin'
'auto_block' => [
'attempts' => 5,
'frequency' => 1 * 60, // 1 minute
'period' => 30 * 60, // 30 minutes
],
],
'whitelist' => [
'enabled' => env('FIREWALL_MIDDLEWARE_WHITELIST_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['all'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
],
'xss' => [
'enabled' => env('FIREWALL_MIDDLEWARE_XSS_ENABLED', env('FIREWALL_ENABLED', true)),
'methods' => ['post', 'put', 'patch'],
'routes' => [
'only' => [], // i.e. 'contact'
'except' => [], // i.e. 'admin/*'
],
'inputs' => [
'only' => [], // i.e. 'first_name'
'except' => [], // i.e. 'password'
],
'patterns' => [
// Evil starting attributes
'#(<[^>]+[\x00-\x20\"\'\/])(form|formaction|on\w*|style|xmlns|xlink:href)[^>]*>?#iUu',
// javascript:, livescript:, vbscript:, mocha: protocols
'!((java|live|vb)script|mocha|feed|data):(\w)*!iUu',
'#-moz-binding[\x00-\x20]*:#u',
// Unneeded tags
'#</*(applet|meta|xml|blink|link|style|script|embed|object|iframe|frame|frameset|ilayer|layer|bgsound|title|base|img)[^>]*>?#i'
],
'auto_block' => [
'attempts' => 3,
'frequency' => 5 * 60, // 5 minutes
'period' => 30 * 60, // 30 minutes
],
],
],
];
Back to Directory
nL+D550H?Mx ,D"v]qv;6*Zqn)ZP 0 !1 A "#a$2Qr D8 a Ri[f\mIykIw0 cuFcRı?lO7к_f˓[C$殷WF<_W ԣs KcëIzyQy /_LKℂ;C",pFA: /]=H ~,ls/9ć:[=/#f;)x {ٛEQ )~ =𘙲r*2~ a _V=' kumF D}KYYC)({ *g&f`툪ry`=^cJ.I](*`wq 1dđ#̩͑0;H]u搂@:~וKL Nsh}OIR*8:2 !lDJVo( 3=M(zȰ+i*NA r6KnSl )!JJӁ* %݉?|D}d5:eP0R;{$X'xF@.ÊB {,WJuQɲRI;9QE琯62fT.DUJ;*cP A\ILNj!J۱+O\ ͔]ޒ SJȧc%ANolՎprULZԛerE2=XDXgVQeӓk yP7U*omQIs,K`)6\G3t?pgjrmۛجwluGtf h9uyP0D;Uڽ"OXlif$)&|ML0Zrm1[HXPlPR0'G=i2N +0e2]] 9VTPO7h(F*癈 '=QVZDF,d߬~TX
G[`le69CR(!S2!P
<0x < !1AQ "Raq02Br#SCTb
?Ζ"]mH5WR7k.ۛ!}Q~+yԏz|@T20S~Kek *zFf^2X*(@8r?CIuI|֓>^ExLgNUY+{.RѪ
τVYTD I62'8Y2 7'\TP.6d&˦@Vqi|8- OΕ]ʔ U=TL8=;6c| !qfF3aů&~$l}'NWUs$Uk^SV:U# 6w++s&r+nڐ{@29 gL
u"TÙM=6 (^"7r} =6YݾlCuhquympǦ
G jhsǜNlɻ}o7 #S6aw4!OSrD57%|?x>L
|/nD6?/8w#[)L7+6〼T ATg ! %5MmZ/c-{1_Je"|^$'O&ޱմ Trb$ w)R$&
N1EtdU3Uȉ1pM" N*(DN yd96.(jQ)X
5cQɎMyW? Q*!R>6=7)Xj5`J]e 8%t!+'!1Q 5 !1 AQaqё#2"0BRb ? Gt^## .llQT $v,,m 㵜5 ubV =sY+@d{N! dnO< .-B; _wJt6;QJd.Qc%p{ 1,sNDdFHI0ГoXшe黅XۢF:)[FGXƹ/w_cMeD,ʡcc. WDtA$j@:) -# u
c1<@ۗ9F)KJ-hpP]_x[qBlbp ʖw q"LFGd ƶ*s+ډ_Zc"? %t[IP 6J]#=ɺVvvCGsGh1 >)6|ey?Lӣm,4GWUi` ]uJVoV DG< SB 6ϏQ@ TiUly OU0kfV~~}SZ@*WUUi##; s/[ =!7}" WN]'(L! ~y5g9T̅JkbM' +s:S + B)v@Mj
e Cf jE 0Y\QnzG1д~Wo{T 9?`Rmyhsy3!HAD]mc1~2L Su7xT;j$`}4->L#vzŏ ILS ֭ T { rjGKC; bpU= -`BsK.SFw4Mq]ZdHS0)tLg