var %req% "none"
var %res% "none"

<rule>
id=L1
revision=1
name=CheckFirstRequest
type=requestLine
pattern=^CONNECT [-a-zA-Z0-9.]+:443 HTTP/1\.[01]$
condition=not match
case_sensitive=no
log=yes
action=none
command=none
plugin=sample.sslFilter.MFirstRequestChecker
</rule>

<rule>
id=L2
revision=1
name=loadSslFilter
type=requestLine
pattern=^CONNECT [-a-zA-Z0-9.]+:443 HTTP/1\.[01]$
condition=match
case_sensitive=no
log=no
action=none
command=none
plugin=sample.sslFilter.MSslFilter
</rule>

<rule>
id=L3
revision=1
name=DenyNotGet
type=requestLine
pattern=^GET /
condition=not match
case_sensitive=no
log=yes
action=block
command=%req%
</rule>

<rule>
id=L7
revision=1
name=VersionOne
type=requestLine
pattern= HTTP/1\.1$
condition=match
case_sensitive=yes
log=no
action=none
command=none
plugin=sample.sslFilter.MVersionOne
</rule>

<rule>
id=L4
revision=1
name=DenyQuery
type=requestUriQuery
pattern=.
condition=match
case_sensitive=no
log=yes
action=block
command=%req%
</rule>

<rule>
id=L5
revision=1
name=DenyParam
type=requestUriParam
pattern=.
condition=match
case_sensitive=no
log=yes
action=block
command=%req%
</rule>

<rule>
id=L6
revision=1
name=DefaceTitle
type=responseHeader
pattern=^Content-Type: ?text/html
condition=match
case_sensitive=no
log=yes
action=none
command=none
plugin=sample.sslFilter.MDefacer
</rule>