I use Incapsula on all my websites as a Firewall and Admintools on the Joomla Sites.
This is a event notification from Incapsula:
URL:/index.php (GET)
Status: Client was sent a JavaScript security check, request was suspended
Query String:?nn_qp=1&url=http%3a%2f%2fwww.nonumber.nl%2f
Remote File Inclusion (Alert raised)
Attempted on:request parameter url
Threat pattern:http://www.nonumber.nl/
Question is: Is there a way to block a Query String using Admintools? I can block IP's, Countries, etc. but how do I setup blocking Query Strings