TRKJ/EdgeCommon
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeCommon.git synced 2025-11-20 01:30:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

取消WAF规则里的黑白名单

Browse Source
This commit is contained in:
GoEdgeLab
2021-02-02 15:31:01 +08:00
parent c72c669cfa
commit 1a36f37fe4
1 changed files with 0 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
pkg/serverconfigs/firewallconfigs/http_firewall_template.go
View File

@@ -13,64 +13,6 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
policy.Inbound = &HTTPFirewallInboundConfig{}
policy.Outbound = &HTTPFirewallOutboundConfig{}
// black list
{
group := &HTTPFirewallRuleGroup{}
group.IsOn = false
group.Name = "白名单"
group.Code = "whiteList"
group.Description = "在此名单中的IP地址可以直接跳过防火墙设置"
{
set := &HTTPFirewallRuleSet{}
set.IsOn = true
set.Name = "IP白名单"
set.Code = "9001"
set.Connector = HTTPFirewallRuleConnectorOr
set.Action = HTTPFirewallActionAllow
set.AddRule(&HTTPFirewallRule{
IsOn: true,
Param: "${remoteAddr}",
Operator: HTTPFirewallRuleOperatorMatch,
Value: `127\.0\.0\.1|0\.0\.0\.0`,
IsCaseInsensitive: false,
})
group.AddRuleSet(set)
}
policy.Inbound.Groups = append(policy.Inbound.Groups, group)
}
// black list
{
group := &HTTPFirewallRuleGroup{}
group.IsOn = false
group.Name = "黑名单"
group.Code = "blackList"
group.Description = "在此名单中的IP地址直接阻止"
{
set := &HTTPFirewallRuleSet{}
set.IsOn = true
set.Name = "IP黑名单"
set.Code = "10001"
set.Connector = HTTPFirewallRuleConnectorOr
set.Action = HTTPFirewallActionBlock
set.AddRule(&HTTPFirewallRule{
IsOn: true,
Param: "${remoteAddr}",
Operator: HTTPFirewallRuleOperatorMatch,
Value: `1\.1\.1\.1|2\.2\.2\.2`,
IsCaseInsensitive: false,
})
group.AddRuleSet(set)
}
policy.Inbound.Groups = append(policy.Inbound.Groups, group)
}
// xss
{
group := &HTTPFirewallRuleGroup{}