[GH-ISSUE #116] waf_cc_deny doesn't work or doesn't count 404 request #88

New issue

Open

opened 2026-03-04 12:18:50 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 12:18:50 +03:00

Owner

Originally created by @droplinxuser on GitHub (Nov 22, 2022).
Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/116

If I only have this config:
waf_cc_deny on rate=20r/30s duration=1m zone=waf:cc;
It works fine and limit rate 404 request.

But when I add the captcha mode, it doesn't limit rate 404 request anymore.
waf_captcha off prov=reCAPTCHAv3 file=path_to_/v3.html secret=xxxxxx;
waf_action cc_deny=CAPTCHA zone=waf:action;

Using LATEST 'Current' VERSION on Nginx 1.23.2, Ubuntu 22.04, Non-Docker.

Originally created by @droplinxuser on GitHub (Nov 22, 2022). Original GitHub issue: https://github.com/ADD-SP/ngx_waf/issues/116 If I only have this config: `waf_cc_deny on rate=20r/30s duration=1m zone=waf:cc;` It works fine and limit rate 404 request. But when I add the captcha mode, it doesn't limit rate 404 request anymore. `waf_captcha off prov=reCAPTCHAv3 file=path_to_/v3.html secret=xxxxxx;` `waf_action cc_deny=CAPTCHA zone=waf:action;` Using LATEST 'Current' VERSION on Nginx 1.23.2, Ubuntu 22.04, Non-Docker.