Hi  @hetsen, in the current HTTPS profile the 403 Error WAF is saved in the source code, we can do a patch to make this configurable as the other Error messages (501,503..) after talking with the dev team, they decided to make this possible doing the configuration in the configuration file directly. I think this fits your needs.

Keep you updated with instructions as soon as the patch is released.

Thanks for contacting us and using SKUDONET WAF.

Regards!

Hi @hetsen,

we already published a new version of pound package ( 3.1.2-7.2.1 ) that includes the property for WAF response customization.

This feature only can be managed by editing the farm config file ( a restart of the farm is needed to apply the modified farm config )

A new ErrWAF directive in Listener is added, working as the other error handlers Err414, Err500, Err501, and Err503.

ErrWAF "filename"

When the WAF denies a request, it will show the file content.

If the ErrWAF directive is not present in the farm configuration file, it will show the same response as before.

Example including the directive:

....

ListenHTTP
    ErrWAF "/usr/local/skudonet/config/farm01_ErrWAF.html"
    Err414 "/usr/local/skudonet/config/farm01_Err414.html"
    Err500 "/usr/local/skudonet/config/farm01_Err500.html"
    Err501 "/usr/local/skudonet/config/farm01_Err501.html"
...

We recommend using the same config path as the other Error directives in order to include it when a backup is performed.

Could you confirm the new property is working as expected?

Thank you in advance.

Regards.

Topic was moved to "Feature Requests" as this property has been accepted and developed after receiving a request from the community.

Regards