Common Whitelist Rules for DotDefender

This article will go over some of the common whitelist rules you should set up when using dotDefender on your server.

SmarterMail (applies to Windows only)

If there is a domain on SmarterMail, create this rule on the SmarterMail site and set the site to 'Protection' mode. Otherwise with multiple domains on SmarterMail, you can whitelist it with this rule:

Cross-Site Scripting >> User Defined >> Add New Rule

• Description: SmarterMail
• Rule Type: Search in URI
• Apply to specific URI: ^.*/Main/frmMessages.aspx.*$
• Take action: Allow Request (whitelist)

Joomla (Linux and Windows)

This rule applies to the /administrator/index.php file so it will not be blocked when logging into Joomla as an admin.

Cross-Site Scripting >> User Defined >> Add New Rule

• Description: Joomla
• Rule Type: Search in URI
• Apply to specific URI: ^.*/administrator/index.php.*$
• Take action: Allow Request (whitelist)

Wordpress (Linux and Windows)

This rule applies to the /wp-admin/ so it will not be blocked when logging into Wordpress as an admin.

Cross-Site Scripting >> User Defined >> Add New Rule

• Description: Wordpress
• Rule Type: Search in URI
• Apply to specific URI: ^.*/wp-admin/index.php.*$
• Take action: Allow Request (whitelist)