clawbot f416ed4229 Ban the netblock of a client that breaks a rate limit, in memory (closes #18) ...

A request over a rate limit is refused with SWWAF_BAN_RESPONSE and bans
the client's netblock: an hour at first, three times the last ban when
broken again within a day of its end, permanent past seven days. The
ban ledger in internal/bans is checked after the static lists and
before the lookup, and the requests it refuses are not counted. A ban
resets the client's counters and carries notes; at most SWWAF_MAX_BANS
are held. SWWAF_BAN_RESPONSE also answers SWWAF_DENY_NETS and the
country lists.

Deviation: the notes hold the request that broke the limit, not the last ten.
Judgement call: the six ban settings cannot be off.
Judgement call: a permanent ban's ban_expires is "permanent".

Model: opus-5-5

2026-10-06 01:36:40 +00:00

..

requestlog_test.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 01:36:40 +00:00

requestlog.go

Ban the netblock of a client that breaks a rate limit, in memory (closes #18)

2026-10-06 01:36:40 +00:00