Hi, the log lines with scrip 127.0.0.1 are 'normal'. That's for checking the status of the real webservers. If you have a DNAT rule, the traffic bypasses the WAF. Disable the DNAT rule and afterwards check the logs when you make a request. Sabine
↧