add rules to block requests for .sql, wp-*, etc.

[josefaidt]

Issue #, if available:

Description of changes:

• Reduces RateLimit request limit from 1000 (per 5 minutes) to 500
• Adds RateLimitApi rule
• Adds rules to block the following requests:
  • requests ending in .sql
  • requests to /wp-admin
  • requests to /wp-content
  • requests to /swagger

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.