# pw platform firewall exclusions create

> Source: https://parallelworks.com/docs/cli/pw/platform/firewall/exclusions/create

## pw platform firewall exclusions create

Remove a CRS rule, or a tag's rules for one field, from a route

```
pw platform firewall exclusions create [--path route] [--method m]... (--rule-id id | --tag tag --target field) [--note text] [--for duration] [flags]
```

### Examples

```
  # A JSON field that legitimately holds shell commands trips the RCE rules
  pw platform firewall exclusions create --path /api/organizations/{organization}/scripts --method PUT --tag attack-rce --target ARGS:json.script
  
  # One CRS rule misreads a query parameter, for a week while a fix ships
  pw platform firewall exclusions create --path /api/users --rule-id 932260 --target ARGS:sortBy --for 168h
```

### Options

```
      --for duration     How long it applies, such as 168h; absent applies until deleted
  -h, --help             help for create
      --method strings   HTTP method it applies to; repeat for more. Absent applies to every method
      --note string      Why it is needed
      --path string      Route, such as /api/users/{user}; {param} is one path segment and a trailing /* covers every path below. Absent applies to every route
      --rule-id int      CRS rule to remove, as a block log's rule_ids names it
      --tag string       CRS tag whose rules to remove, such as attack-xss; needs --target
      --target string    Request field to limit the removal to, such as ARGS:json.name
```

### Options inherited from parent commands

```
      --context string         The context to use. Overrides PW_CONTEXT environment variable and current context from config.
      --platform-host string   The Parallel Works ACTIVATE platform host to use. Overrides PW_PLATFORM_HOST environment variable and the current context's server.
  -v, --verbose                Enable verbose logging
```

### SEE ALSO

* [pw platform firewall exclusions](/docs/cli/pw/platform/firewall/exclusions)	 - Manage CRS rules removed from routes, to stop false positives