Customizing 403 message - Feature Requests

RE: Customizing 403 message

emiliocm — Wed, 05 Mar 2025 07:10:55 +0000

Good day @hetsen, ErrWAF directive has been included in the Community Edition and @rendone explained how to configure it.

So, we will proceed to close this topic as solved.

Regards!

RE: Customizing 403 message

emiliocm — Tue, 18 Feb 2025 16:23:11 +0000

Hi, did you have the chance to check the requested feature about 403 message customisation?

Any feedback is appreciated

Regards!

RE: Customizing 403 message

emiliocm — Tue, 11 Feb 2025 11:09:03 +0000

Topic was moved to "Feature Requests" as this property has been accepted and developed after receiving a request from the community.

Regards

RE: Customizing 403 message

Rendone — Tue, 11 Feb 2025 10:48:09 +0000

Hi @hetsen,

we already published a new version of pound package ( 3.1.2-7.2.1 ) that includes the property for WAF response customization.

This feature only can be managed by editing the farm config file ( a restart of the farm is needed to apply the modified farm config )

A new ErrWAF directive in Listener is added, working as the other error handlers Err414, Err500, Err501, and Err503.

ErrWAF "filename"

When the WAF denies a request, it will show the file content.

If the ErrWAF directive is not present in the farm configuration file, it will show the same response as before.

Example including the directive:

....

ListenHTTP
ErrWAF "/usr/local/skudonet/config/farm01_ErrWAF.html"
Err414 "/usr/local/skudonet/config/farm01_Err414.html"
Err500 "/usr/local/skudonet/config/farm01_Err500.html"
Err501 "/usr/local/skudonet/config/farm01_Err501.html"
...

We recommend using the same config path as the other Error directives in order to include it when a backup is performed.

Could you confirm the new property is working as expected?

Thank you in advance.

Regards.

RE: Customizing 403 message

emiliocm — Mon, 10 Feb 2025 15:26:46 +0000

Hi @hetsen, in the current HTTPS profile the 403 Error WAF is saved in the source code, we can do a patch to make this configurable as the other Error messages (501,503..) after talking with the dev team, they decided to make this possible doing the configuration in the configuration file directly. I think this fits your needs.

Keep you updated with instructions as soon as the patch is released.

Thanks for contacting us and using SKUDONET WAF.

Regards!

Customizing 403 message

Alan Martín — Mon, 10 Feb 2025 10:08:44 +0000

Hi!

I'm wondering if there is some way to change the 403 with a custom html page? Right now it just returns "SKUDONET WAF replied forbidden".

I at least don't want people to be aware of what type of WAF I am using.

Thank you,

Mikael Isaksson