From 3331d86e988fdba8a71013d87823a76dd754214a Mon Sep 17 00:00:00 2001 From: ibuler Date: Sun, 19 Jun 2016 10:27:12 +0800 Subject: [PATCH] Modify config --- config.lua | 4 +-- waf.lua | 86 ------------------------------------------------------ 2 files changed, 2 insertions(+), 88 deletions(-) delete mode 100644 waf.lua diff --git a/config.lua b/config.lua index bd3a652..237a0fb 100644 --- a/config.lua +++ b/config.lua @@ -15,8 +15,8 @@ attach_log_dir = "/data/logs/waf/" redirect = false redirect_url = "http://www.baidu.com" ip_check = false -ip_white_list = {"127.0.0.1", "172.16.1"} -ip_black_list = {"1.0.0.1", "172.16.1"} +ip_white_list = {} -- {'192.168.1.*', '127.0.0.1'} +ip_black_list = {} -- {'0.0.0.0', '106.2.34.29'} cc_deny = false cc_rate = "100/60" diff --git a/waf.lua b/waf.lua deleted file mode 100644 index f35e95e..0000000 --- a/waf.lua +++ /dev/null @@ -1,86 +0,0 @@ -local content_length=tonumber(ngx.req.get_headers()['content-length']) -local method=ngx.req.get_method() -local ngxmatch=ngx.re.match - -if whiteip() then -elseif blockip() then -elseif denycc() then -elseif ngx.var.http_Acunetix_Aspect then - ngx.exit(444) -elseif ngx.var.http_X_Scan_Memo then - ngx.exit(444) -elseif whiteurl() then -elseif ua() then -elseif url() then -elseif args() then -elseif cookie() then -elseif PostCheck then - if method=="POST" then - local boundary = get_boundary() - if boundary then - local len = string.len - local sock, err = ngx.req.socket() - if not sock then - return - end - ngx.req.init_body(128 * 1024) - sock:settimeout(0) - local content_length = nil - content_length=tonumber(ngx.req.get_headers()['content-length']) - local chunk_size = 4096 - if content_length < chunk_size then - chunk_size = content_length - end - local size = 0 - while size < content_length do - local data, err, partial = sock:receive(chunk_size) - data = data or partial - if not data then - return - end - ngx.req.append_body(data) - if body(data) then - return true - end - size = size + len(data) - local m = ngxmatch(data,[[Content-Disposition: form-data;(.+)filename="(.+)\\.(.*)"]],'ijo') - if m then - fileExtCheck(m[3]) - filetranslate = true - else - if ngxmatch(data,"Content-Disposition:",'isjo') then - filetranslate = false - end - if filetranslate==false then - if body(data) then - return true - end - end - end - local less = content_length - size - if less < chunk_size then - chunk_size = less - end - end - ngx.req.finish_body() - else - ngx.req.read_body() - local args = ngx.req.get_post_args() - if not args then - return - end - for key, val in pairs(args) do - if type(val) == "table" then - data=table.concat(val, ", ") - else - data=val - end - if data and type(data) ~= "boolean" and body(data) then - return true - end - end - end - end -else - return -end