TRKJ/EdgeNode
2
0
Fork 0
mirror of https://github.com/TeaOSLab/EdgeNode.git synced 2025-11-04 07:40:56 +08:00
Code Issues Packages Projects Releases Wiki Activity

修复IP黑名单为服务时不生效的问题

Browse Source
This commit is contained in:
GoEdgeLab
2021-10-19 09:21:58 +08:00
parent c0ddfa2cf1
commit ff5e3a3e14
1 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
internal/nodes/http_request_waf.go
View File

@@ -22,10 +22,25 @@ func (this *HTTPRequest) doWAFRequest() (blocked bool) {
if conn != nil { if conn != nil {
trafficConn, ok := conn.(*TrafficConn) trafficConn, ok := conn.(*TrafficConn)
if ok && trafficConn.IsClosed() { if ok && trafficConn.IsClosed() {
this.disableLog = true
return true return true
} }
} }
// 检查是否在临时黑名单中
if waf.SharedIPBlackList.Contains(waf.IPTypeAll, firewallconfigs.FirewallScopeService, this.Server.Id, this.WAFRemoteIP()) {
this.disableLog = true
if conn != nil {
trafficConn, ok := conn.(*TrafficConn)
if ok && !trafficConn.IsClosed() {
_ = trafficConn.Close()
}
}
return true
}
// 当前服务的独立设置 // 当前服务的独立设置
if this.web.FirewallPolicy != nil && this.web.FirewallPolicy.IsOn { if this.web.FirewallPolicy != nil && this.web.FirewallPolicy.IsOn {
blocked, breakChecking := this.checkWAFRequest(this.web.FirewallPolicy) blocked, breakChecking := this.checkWAFRequest(this.web.FirewallPolicy)