clawbot 189e56a7fc Country allow and deny lists, looked up through GeoJS (closes #44) ...

SWWAF_DENIED_COUNTRIES and SWWAF_EXCLUSIVELY_ALLOWED_COUNTRIES refuse a
request with 403 before its body is read or rate-limited, logged as
country_denied. internal/lookup asks GeoJS only while a list is set, 200
waiting clients per request, one at a time, keeping answers 7 days. A
redirect, or an answer leaving an address out, is a failure; GeoJS is then
left alone a second, doubling to five minutes. Private, loopback and
link-local clients are never sent.

Deviation, per the issue: no SWWAF_LOOKUP_SOURCE or SWWAF_LOOKUP_TIMEOUT; 403, not SWWAF_BAN_RESPONSE.
Deviation: GeoJS's country endpoint, not geo.json.
Judgement call: an IPv6 /64 is asked about by its first address; at most 10,000 clients wait.
Judgement call: config.go lists the ISO 3166-1 codes; no widely used library holds them.

Model: opus-5-5

2026-10-04 05:43:00 +00:00

..

config

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 05:43:00 +00:00

lookup

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 05:43:00 +00:00

proxy

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 05:43:00 +00:00

ratelimit

Per-client request rate limits over a minute, an hour and a day (closes #43)

2026-10-04 04:24:34 +02:00

requestlog

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 05:43:00 +00:00

smallwebwaf

Country allow and deny lists, looked up through GeoJS (closes #44)

2026-10-04 05:43:00 +00:00