diff --git a/config.lua b/config.lua index 6e66ce6..321f8aa 100644 --- a/config.lua +++ b/config.lua @@ -8,6 +8,7 @@ postMatch="on" whiteModule="on" black_fileExt={"php","jsp"} ipWhitelist={"127.0.0.1"} +servernameWhitelist={"www.xx.com"} ipBlocklist={"1.0.0.1"} CCDeny="off" CCrate="100/60" diff --git a/init.lua b/init.lua index eb44bf0..871c491 100644 --- a/init.lua +++ b/init.lua @@ -241,3 +241,15 @@ function blockip() end return false end + +function whiteSvrName() + if next(servernameWhitelist) ~= nil then + for _,svrname in pairs(servernameWhitelist) do + if ngx.var.server_name == svrname then + return true + end + end + end + return false +end + diff --git a/waf.lua b/waf.lua index bc9821c..b8b9386 100644 --- a/waf.lua +++ b/waf.lua @@ -3,6 +3,7 @@ local method=ngx.req.get_method() local ngxmatch=ngx.re.match if whiteip() then elseif blockip() then +elseif whiteSvrName() then elseif denycc() then elseif ngx.var.http_Acunetix_Aspect then ngx.exit(444)