Firewall for TYPO3 0.7.0
Reworks the firewall backend module around a per-key event view with filters and search, adds a PCRE JIT check to the TYPO3 status report, and updates the firewall engine to Phirewall 0.10.
Highlights
- Event log grouped by key. The events view groups the log by the acting key (usually the client IP) instead of listing every request separately, so an attack reads as one row with its request count. The module follows the TYPO3 core backend patterns for tables, pagination and filtering.
- Type, key and rule filters plus full-IP search. The events view filters by event type, key and rule name, and the search matches the full IP even though the log stores it anonymized (a keyed hash makes that possible; the statistics privacy note in the documentation explains it).
- PCRE JIT check in the status report. With
typo3/cms-reportsinstalled, System > Status warns when PCRE JIT is disabled (pcre.jit) or the PHP build's PCRE library has no JIT support. The firewall evaluates regular expression patterns on every request, so matching without JIT is noticeably slower. - Phirewall 0.10. The extension now ships Phirewall 0.10: the
scopefilter on the typed throttle API and the opt-inblockOnSignalBanbehavior are available toconfig/system/phirewall.phpconfigurations.
What's Changed
- Rework the firewall backend module: key grouping, filters, and hardening by @sascha-egerer in #71
- Add a PCRE JIT check to the status report by @sascha-egerer in #72
- Prepare the 0.7.0 release by @sascha-egerer in #73
Full Changelog: 0.6.0...0.7.0