Skip to content

Latest commit

 

History

History
62 lines (45 loc) · 1.5 KB

File metadata and controls

62 lines (45 loc) · 1.5 KB

Introduction

Block incoming connection/request based on defined rules.

Configuration

  • Module config file

    conf/mod_block/mod_block.conf

    [basic]
    # product rule config file path
    ProductRulePath = ../conf/mod_block/block_rules.data
    
    # global ip blacklist file path
    IPBlacklistPath = ../conf/mod_block/ip_blacklist.data
    
  • Data config file

    • ip blacklist file

      conf/mod_block/ip_blacklist.data

      192.168.1.253 192.168.1.254
      192.168.1.250
      
    • block rules file

      conf/mod_block/block_rules.data

      Config Item Type Description
      Version String Verson of config file
      Config Struct Block rules for each product. Block rule include:
      - Cond: "condition" expression
      - Action: what to do after matched
      - Name: rule name
      Action Description
      CLOSE Close the connection
      {
        "Version": "20190101000000",
        "Config": {
            "example_product": [
                {
                  "action": {
                        "cmd": "CLOSE",
                        "params": []
                    },
                    "name": "example rule",
                    "cond": "req_path_in(\"/limit\", false)"            
                }
            ]
        }
      }