smallwebwaf

137 Commits 18 Branches 2 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
sneak	879d3a9583	Every time in UTC, and every day as YYYY-MM-DD (closes #313 ) check / check (push) Successful in 4m27s Details AbuseIPDB's daily count keeps its day as a civil.Date, taken from the UTC clock and written to reputation.json as "YYYY-MM-DD"; it was a time.Time at midnight. A test runs sww discriminator with TZ 14 hours ahead of UTC and checks the process line, the request line and clients.json are in UTC. SPEC.md states the rule near its start; AGENTS.md makes it an iron rule. Model: opus-5-5	2026-11-11 00:15:46 +00:00
clawbot	beb503b233	Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 ) check / check (push) Failing after 1m34s Details	2026-11-07 06:51:06 +01:00
clawbot	ca787985f8	AbuseIPDB scores for clients that committed an offence, within a daily budget (closes #105 ) check / check (push) Canceled after 0s Details With SWWAF_ABUSEIPDB_KEY set, a client whose history counts an offence (a broken limit, a ban rule's match or a block rule's refusal, counted by kind) is checked in the background, at most SWWAF_ABUSEIPDB_DAILY_BUDGET checks a day, the count kept in reputation.json. A client, an IPv4 address or an IPv6 /64, is checked by the address it sent from, and its score serves all its addresses. A score at or over SWWAF_ABUSEIPDB_MIN_SCORE is a hit for SWWAF_REPUTATION_ACTION, logged as abuseipdb and alerted with its score. A failure or the used-up budget gives no score and raises source_failure. The key goes only in the Key header. Judgement call: the budget's day is UTC; AbuseIPDB documents no reset time. Judgement call: each check sent spends budget; a minute's pause after a failure. Model: opus-5-5	2026-10-07 22:47:06 +02:00

Author

SHA1

Message

Date

sneak

879d3a9583

Every time in UTC, and every day as YYYY-MM-DD (closes #313 )

check / check (push) Successful in 4m27s

Details

AbuseIPDB's daily count keeps its day as a civil.Date, taken from the UTC
clock and written to reputation.json as "YYYY-MM-DD"; it was a time.Time
at midnight. A test runs sww discriminator with TZ 14 hours ahead of UTC
and checks the process line, the request line and clients.json are in
UTC. SPEC.md states the rule near its start; AGENTS.md makes it an iron
rule.

Model: opus-5-5

2026-11-11 00:15:46 +00:00

clawbot

beb503b233

Rename the program to sww and its deciding daemon to discriminator (closes #218 ) (#221 )

check / check (push) Failing after 1m34s

Details

2026-11-07 06:51:06 +01:00

clawbot

ca787985f8

AbuseIPDB scores for clients that committed an offence, within a daily budget (closes #105 )

check / check (push) Canceled after 0s

Details

With SWWAF_ABUSEIPDB_KEY set, a client whose history counts an offence
(a broken limit, a ban rule's match or a block rule's refusal, counted
by kind) is checked in the background, at most
SWWAF_ABUSEIPDB_DAILY_BUDGET checks a day, the count kept in
reputation.json. A client, an IPv4 address or an IPv6 /64, is checked by
the address it sent from, and its score serves all its addresses. A
score at or over SWWAF_ABUSEIPDB_MIN_SCORE is a hit for
SWWAF_REPUTATION_ACTION, logged as abuseipdb and alerted with its score.
A failure or the used-up budget gives no score and raises
source_failure. The key goes only in the Key header.

Judgement call: the budget's day is UTC; AbuseIPDB documents no reset time.
Judgement call: each check sent spends budget; a minute's pause after a failure.

Model: opus-5-5

2026-10-07 22:47:06 +02:00