github ADD-SP/ngx_waf v3.0.0-beta-2

latest releases: v10.1.2, v6.1.9, v10.1.1...
pre-release3 years ago

[3.0.0-beta-2]

Added

  • Anti Challenge Collapsar now supports IPV6 (00fbc1c).

  • IP black and white lists support IPV6, and can recognize IPV6 strings such as fe80::/10 (8519b26).

Changed

  • Friendly error alerts (d1185b2 & f2b617d). Warnings or error reporting when IP addresses in the rule file are invalid or IP address blocks overlap (does not detect all overlaps).

  • Faster IP matching (2b9e774).

Fixed

  • Fixed a bug that caused the cookie inspection not work (87beed1).

  • Modify the config file to ensure that the latest module code is compiled when executing make or make modules (25f97f5). Before the fix, if only the files under inc/ changed, the latest code would not be compiled because the files under inc/ were not checked for changes.

  • Fixed a bug with incorrect IPV4 segment identification (73a22eb). This bug could cause the subnet mask not to be generated correctly when a rule like 192.168.0.0/10, i.e. the suffix is not a multiple of 8, appears in the rule.


[3.0.0-beta-2]

新增

  • CC 防御现在也支持了 IPV6(00fbc1c)。

  • IP 黑白名单支持了 IPV6。可以识别形如 fe80::/10 的 IPV6 字符串(8519b26)。

改动

  • 友好的错误提示(d1185b2 & f2b617d)。当规则文件中 IP 地址无效或者 IP 地址块重叠的时候警告或者报错(并不能检测所有的重叠情况)。

  • 更快的 IP 地址检查速度(2b9e774)。改用前缀树检查 IP,现在在常数时间内即可完成 IP 的匹配,之前是一个一个地匹配,是线性时间。

修复

  • 修复了 Cookie 检查的失效的 bug(87beed1)。

  • 修改 config 文件以确保执行 makemake modules 时最新的模块代码能够被编译(25f97f5)。在修复之前,如果仅仅 inc/ 下的文件发生变化,编译时不会将最新的代码编译进去,因为没有检查 inc/ 下的文件是否发生变化。

  • 修复了 IPV4 网段识别错误的 bug(73a22eb)。这个 bug 可能会导致当规则中出现类似 192.168.0.0/10,即后缀不是 8 的倍数的时候无法正确生成子网掩码。

Don't miss a new ngx_waf release

NewReleases is sending notifications on new releases.