WAF

Firewall rules I have checked against real traffic instead of assumptions.