TRKJ/EdgeCommon
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeCommon.git synced 2025-11-12 19:30:25 +08:00
Code Issues Packages Projects Releases Wiki Activity

WAF模板--爬虫工具增加白名单

Browse Source
This commit is contained in:
刘祥超
2022-01-10 10:27:08 +08:00
parent 78456d2205
commit 1ddb90ef74
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pkg/serverconfigs/firewallconfigs/http_firewall_template.go
View File

@@ -446,7 +446,7 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
set.IsOn = true set.IsOn = true
set.Name = "爬虫工具" set.Name = "爬虫工具"
set.Code = "20003" set.Code = "20003"
set.Connector = HTTPFirewallRuleConnectorOr set.Connector = HTTPFirewallRuleConnectorAnd
set.Actions = []*HTTPFirewallActionConfig{ set.Actions = []*HTTPFirewallActionConfig{
{ {
Code: HTTPFirewallActionBlock, Code: HTTPFirewallActionBlock,
@@ -460,6 +460,14 @@ func HTTPFirewallTemplate() *HTTPFirewallPolicy {
Value: `python|pycurl|http-client|httpclient|apachebench|nethttp|http_request|java|perl|ruby|scrapy|php|rust`, Value: `python|pycurl|http-client|httpclient|apachebench|nethttp|http_request|java|perl|ruby|scrapy|php|rust`,
IsCaseInsensitive: true, IsCaseInsensitive: true,
}) })
set.AddRule(&HTTPFirewallRule{
IsOn: true,
Param: "${userAgent}",
Operator: HTTPFirewallRuleOperatorNotMatch,
Value: `goedge`,
IsCaseInsensitive: true,
Description: "User-Agent白名单",
})
group.AddRuleSet(set) group.AddRuleSet(set)
} }