update

rules/force-https.lua

@@ -10,6 +10,6 @@
 
 
 if waf.scheme == "http" then
-    return waf.redirect("https://" .. waf.host)
+    return waf.redirect("https://" .. waf.host .. waf.reqUri)
 end
 return false

rules/geo-block.lua

@@ -14,7 +14,7 @@ if waf.contains(waf.ip,":") then
 end
 
 local country, province, city = waf.ip2loc(waf.ip)
-if country and country ~= "中国" then
+if country ~= "中国" and country ~= "内网IP" then
     return true, "限制非中国地区访问", true
 end
 return false

rules/ip-block.lua

@@ -11,8 +11,8 @@
 
 local ip = waf.ip
  
-if waf.contains(ip,"10.20.11.193") then
+if waf.startWith(ip,"10.20.11.") then
        return waf.block(true)     -- 重置TCP连接，不记录日志
- end
+end
 
 return false