[GH-ISSUE #113] 配置white-url后,无论是否有攻击行为,对应的请求都会被ngx_waf记录 #223

Open
opened 2026-03-13 17:06:29 +03:00 by kerem · 1 comment
Owner

Originally created by @gongwenbin on GitHub (Oct 31, 2022).
Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/113

ngx_waf版本:current
nginx -V:--with-http_ssl_module --with-http_stub_status_module --with-http_gzip_static_module --with-http_realip_module --with-stream --with-pcre --add-dynamic-module=/usr/local/src/ngx_waf --with-compat --with-cc-opt=-std=gnu99

现象:
配置white-url后,如果请求匹配到了white-url,无论是否有攻击行为,对应的请求都会被ngx_waf记录,相应日志会记录到nginx_error.log,且日志级别为alert。

希望:
1、对于已经加了白名单的请求, ngx_waf不应当记录日志。
2、ngx_waf 日志级别可调。
3、应当有可选配置, ngx_waf是否计入error_log中。

Originally created by @gongwenbin on GitHub (Oct 31, 2022). Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/113 ngx_waf版本:current nginx -V:--with-http_ssl_module --with-http_stub_status_module --with-http_gzip_static_module --with-http_realip_module --with-stream --with-pcre --add-dynamic-module=/usr/local/src/ngx_waf --with-compat --with-cc-opt=-std=gnu99 现象: 配置white-url后,如果请求匹配到了white-url,无论是否有攻击行为,对应的请求都会被ngx_waf记录,相应日志会记录到nginx_error.log,且日志级别为alert。 希望: 1、对于已经加了白名单的请求, ngx_waf不应当记录日志。 2、ngx_waf 日志级别可调。 3、应当有可选配置, ngx_waf是否计入error_log中。
Author
Owner

@stale[bot] commented on GitHub (Nov 7, 2022):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
此 issue 因为最近没有任何活动已经被标记,如果在此之后的一段时间内仍没有任何活动则会被关闭。感谢您对项目的支持。

<!-- gh-comment-id:1306131108 --> @stale[bot] commented on GitHub (Nov 7, 2022): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions. 此 issue 因为最近没有任何活动已经被标记,如果在此之后的一段时间内仍没有任何活动则会被关闭。感谢您对项目的支持。
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/ngx_waf#223
No description provided.