From 1c0e015c69100625dfa00b8083614790907ba4b9 Mon Sep 17 00:00:00 2001
From: WeebDataHoarder <57538841+WeebDataHoarder@users.noreply.github.com>
Date: Sun, 13 Apr 2025 16:43:27 +0200
Subject: [PATCH] Added JA4 sample to forgejo example

---
 examples/forgejo.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/examples/forgejo.yml b/examples/forgejo.yml
index 59972bc..ec408f5 100644
--- a/examples/forgejo.yml
+++ b/examples/forgejo.yml
@@ -227,11 +227,14 @@ conditions:
     - 'userAgent.startsWith("reqwest/")'
 
   is-suspicious-crawler:
+    # TLS Fingerprint for specific agent
+    - 'fpJA4 == "t13d311000_e8f1e7e78f70_a29327ec888c"'
+    # Old engines
     - 'userAgent.contains("Presto/") || userAgent.contains("Trident/")'
     # Old IE browsers
     - 'userAgent.matches("MSIE ([2-9]|10|11)\\.")'
     # Old Linux browsers
-    - 'userAgent.contains("Linux i[63]86") || userAgent.contains("FreeBSD i[63]86")'
+    - 'userAgent.matches("Linux i[63]86") || userAgent.matches("FreeBSD i[63]86")'
     # Old Windows browsers
     - 'userAgent.matches("Windows (3|95|98|CE)") || userAgent.matches("Windows NT [1-5]\\.")'
     # Old mobile browsers