diff --git a/pkg/serverconfigs/firewallconfigs/http_firewall_template.go b/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
index 0eadc65..8c435a1 100644
--- a/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
+++ b/pkg/serverconfigs/firewallconfigs/http_firewall_template.go
@@ -446,7 +446,7 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 			set.IsOn = true
 			set.Name = "爬虫工具"
 			set.Code = "20003"
-			set.Connector = HTTPFirewallRuleConnectorOr
+			set.Connector = HTTPFirewallRuleConnectorAnd
 			set.Actions = []*HTTPFirewallActionConfig{
 				{
 					Code: HTTPFirewallActionBlock,
@@ -460,6 +460,14 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 				Value:             `python|pycurl|http-client|httpclient|apachebench|nethttp|http_request|java|perl|ruby|scrapy|php|rust`,
 				IsCaseInsensitive: true,
 			})
+			set.AddRule(&HTTPFirewallRule{
+				IsOn:              true,
+				Param:             "${userAgent}",
+				Operator:          HTTPFirewallRuleOperatorNotMatch,
+				Value:             `goedge`,
+				IsCaseInsensitive: true,
+				Description:       "User-Agent白名单",
+			})
 
 			group.AddRuleSet(set)
 		}