wargio / naxsi

NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

IgnoreCIDR not working?

Napsty opened this issue · comments

In the Naxsi config I added a IgnoreCIDR "192.168.0.0/16" but requests from within that range are blocked:

2022/11/05 15:22:06 [error] 23853#23853: *1364 NAXSI_FMT: ip=192.168.12.126&server=app.example.com&uri=/rest/gadgets/1.0/g/messagebundle/en_UK/gadget.common,gadget.issuetable,gadget.assignedtome,gadget.issuetable.common&vers=1.4&total_processed=584&total_blocked=20&config=ignore&cscore0=$SQL&score0=8&zone0=URL&id0=1000&var_name0=, client: 192.168.12.126, server: app.example.com, request: "GET /rest/gadgets/1.0/g/messagebundle/en_UK/gadget.common%2Cgadget.issuetable%2Cgadget.assignedtome%2Cgadget.issuetable.common HTTP/1.0", host: "app.example.com"

This seems to only happen since I rebuilt the naxsi module from this repo. With the 1.3 release from nbs I haven't seen any blocks on the range defined in IgnoreCIDR. Can you confirm?

sorry. i'm blind.
&config=ignore

all good