2026-10-06 - 2026-10-13
Overview
27 Pull requests merged by 1 user
Merged
#122 Core Rule Set reads request bodies up to SWWAF_WAF_BODY_LIMIT
Merged
#121 The Core Rule Set, run by Coraza, on each request's method, URL and headers
Merged
#120 Tests that wait for a lookup answer give it an hour
Merged
#118 Trap paths, and the error burst banning a client refused too often
Merged
#117 CrowdSec decision list fetched, kept, and its clients banned until the decision ends
Merged
#114 Ban notes name the reputation sources that listed the client
Merged
#113 SWWAF_IPV6_GROUP_PREFIX, SWWAF_MAX_TRACKED_CLIENTS and SWWAF_LOG_LEVEL
Merged
#111 AbuseIPDB scores for clients that committed an offence, within a daily budget
Merged
#110 DNS blocklists asked in the background, verdicts kept
Merged
#108 Blocklists and an AS percentage file fetched by URL
Merged
#107 Anomaly thresholds: alerts for unusual traffic, nothing refused
Merged
#103 Lower limits for listed AS numbers and countries
Merged
#102 Byte limits per client over a minute, an hour and a day
Merged
#100 make tidy, and make check failing on an untidy go.mod or go.sum
Merged
#98 Look clients up in the IPinfo Lite file with SWWAF_LOOKUP_SOURCE=file
Merged
#97 AS number and country looked up for every client
Merged
#96 Instance name on process log lines and every metric
Merged
#94 Alerts to Slack and ntfy, each destination with its own queue
Merged
#93 Alerts to a JSON webhook, with a cooldown and an hourly summary
Merged
#92 Admin endpoints for bans and clients on the single listener
Merged
#89 Settings given as files: the _FILE form of every setting
Merged
#88 Bans an admin makes or lifts: the admin cause, a reason, lifted bans kept
Merged
#84 Send every log line to a syslog server as well
Merged
#83 Rule files, and bans for a clear sign of attack
Merged
#80 Leave SWWAF_RATE_LIMIT_EXEMPT_PATHS out of the request rate limits
Merged
#82 Log the rest of the request log's fields
Merged
#75 Take in an admin's edits of the state files while running
16 Issues created by 1 user
Opened
#85 Default rule file: a probe sent percent-encoded gets past its path rules
Opened
#86 Bans an admin makes or lifts: the admin cause, a reason, lifted bans kept
Opened
#87 Settings given as files: the _FILE form of every setting
Opened
#90 Alerts to Slack and ntfy
Opened
#91 SWWAF_INSTANCE_NAME on process log lines and metrics
Opened
#95 AS number and country looked up for every client
Opened
#99 make tidy, and make check failing on an untidy go.mod or go.sum
Opened
#101 Anomaly thresholds: alerts for unusual traffic, nothing refused
Opened
#104 Reputation: DNS blocklists
Opened
#105 Reputation: AbuseIPDB
Opened
#106 Reputation: the CrowdSec decision feed
Opened
#109 Ban notes name the reputation sources that listed the client
Opened
#112 SWWAF_IPV6_GROUP_PREFIX, SWWAF_MAX_TRACKED_CLIENTS and SWWAF_LOG_LEVEL
Opened
#115 Trap paths and the error burst
Opened
#116 Body inspection by the Core Rule Set (SWWAF_WAF_BODY_LIMIT)
Opened
#119 TestBanNotes can fail when the test process is held up past the lookup timeout
14 Unresolved Conversations
Open
#40
Milestones 1 and 2: proxy with timeouts and size limits, rate limits, country lists and the image
Open
#25
The Core Rule Set, run by Coraza
Open
#30
Gitea requests the Core Rule Set may refuse at the defaults, to be checked against a running gitea when milestone 1 is built
Open
#29
Reputation: downloaded blocklists
Open
#21
Lower limits for listed AS numbers and countries
Open
#20
Byte limits per client
Open
#22
The IPinfo Lite file as a second lookup source
Open
#26
Alerts: the queue and the JSON webhook
Open
#27
Admin listener
Open
#28
Remote log sending
Open
#24
Rule files
Open
#77
Paths the request rate limits do not count (SWWAF_RATE_LIMIT_EXEMPT_PATHS)
Open
#79
The rest of the request log's fields
Open
#68
State files: take in an admin's edits while running