WAF模板--爬虫工具增加白名单

pkg/serverconfigs/firewallconfigs/http_firewall_template.go

@@ -446,7 +446,7 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 			set.IsOn = true
 			set.Name = "爬虫工具"
 			set.Code = "20003"
-			set.Connector = HTTPFirewallRuleConnectorOr
+			set.Connector = HTTPFirewallRuleConnectorAnd
 			set.Actions = []*HTTPFirewallActionConfig{
 				{
 					Code: HTTPFirewallActionBlock,
@@ -460,6 +460,14 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
 				Value:             `python|pycurl|http-client|httpclient|apachebench|nethttp|http_request|java|perl|ruby|scrapy|php|rust`,
 				IsCaseInsensitive: true,
 			})
+			set.AddRule(&HTTPFirewallRule{
+				IsOn:              true,
+				Param:             "${userAgent}",
+				Operator:          HTTPFirewallRuleOperatorNotMatch,
+				Value:             `goedge`,
+				IsCaseInsensitive: true,
+				Description:       "User-Agent白名单",
+			})
 
 			group.AddRuleSet(set)
 		}