> For the complete documentation index, see [llms.txt](https://docs.link11.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.link11.com/product-guides/zero-touch-waf/faq.md).

# FAQ

***

## **How exactly do WAF Rules work?**

Link11 uses a Ruleset created by OWASP. The Core rule set can be found here: <https://github.com/coreruleset/coreruleset/>

***

## **Where are explanations of the individual Rules?**

[Here](/reference/zero-touch-waf-rules.md).

***

## **Can you block requests with specific file types (for example .php requests)?**

The core ruleset allows blocking of malicious traffic with specific file endings (for example malicious .php files) but a filtering/blocking of all requests with these file endings is not possible at this time.

***

## **Can you whitelist WAF Rules on a specific Path or Location?**

Yes, Link11 supports [path-specific whitelisting](/product-guides/web-ddos/interface/waf-rules.md#id-webddos-wafrules-pathspecificrules).