Change Log

[3.0.0] - 2020-12-25

Added

Anti Challenge Collapsar now supports IPV6 (00fbc1c).
IP black and white lists support IPV6, and can recognize IPV6 strings such as fe80::/10 (8519b26).

Changed

Delete some meaningless logs (bd279e7).
Friendly error alerts (d1185b2 & f2b617d). Warnings or error reporting when IP addresses in the rule file are invalid or IP address blocks overlap (does not detect all overlaps).
Faster IP matching (2b9e774).

Fixed

Fixed a bug that caused the cookie inspection not work (87beed1).
Modify the config file to ensure that the latest module code is compiled when executing make or make modules (25f97f5). Before the fix, if only the files under inc/ changed, the latest code would not be compiled because the files under inc/ were not checked for changes.
Fixed a bug with incorrect IPV4 segment identification (73a22eb). This bug could cause the subnet mask not to be generated correctly when a rule like 192.168.0.0/10, i.e. the suffix is not a multiple of 8, appears in the rule.

[2.1.1] - 2020-12.10

Added

Changed

Fixed

Fixed a module startup failure error. The error message for this error is nginx: [alert] could not open error log file: open() "ngx_waf: /logs/error.log" failed (2: No such file or directory) (0dfc46f).

[2.1.0] - 2020-12-09

Added

Compatible with the mainline version of NGINX (f31f906 & 65277d1).

Changed

Fixed

[2.0.2] - 2020-12-07

Added

Changed

Fixed

Fix for Anti Challenge Collapsar failing when waf_mult_mount is disabled (048fe5c).
Fixed compile error caused by incorrect #include (3fa298c).

[2.0.1] - 2020-12-03

Added

Changed

Instead of downloading the uthash dependency manually, you can install the system library with yum install uthash-devel or apt-get install uthash-dev (7cfc94b).

Fixed

Fixed a bug that failed to compile under CentOS/RHEL 6 or 7 that was caused by not properly preventing macro redefinitions (28e1c8a & 566ae4a).

[2.0.0] - 2020-09-29

Added

We can compile the module with --add-dynamic-module. Thanks for dvershinin's work(ADD-SP#4)。

Changed

Remove a default User-Agent rule that is (?i)(? :Sogou web spider), as it will block non-malicious web spider(827d4e5).
Merge directives (ba92cfd). These directives will be merged: waf_check_ipv4, waf_check_url, waf_check_args, waf_check_ua, waf_check_referer, waf_check_cookie, waf_check_post, waf_check_cookie, waf_cc_deny. The merged new directive is waf_mode, see README.

Fixed

The blank lines in the rules can now be read correctly (955cf2d).