Can't get the GET header filter to work.

[sidki3003]

As Mike mentioned above, there is no such thing like *the* GET header.
What you're trying to achieve is blocking requests that contain "email=" in the URL.

During the request the URL is split into two parts:
"GET" contains the relative URL path (this is *no* header, but the request).
"Host" contains the hostname part (this is a header).

So what you want is a header filter that simply blocks "email=" in the URL match:

Code:

[HTTP headers]
In = FALSE
Out = TRUE
Key = "!-|||||||||||| URL: Block Requests containing "email=" (Out)"
URL = "*email\="
Replace = "Killed\k"

HTH,
sidki