Here is a minimal WAF! Note: Don't forget that the target host is localhost from the admin bot.