sneak f519e2ca9e discriminator: the header limits are the first check (closes #311) ...

A request over 50 cookies or 100 header fields is now refused before any
other check. It causes no lookup, no query to RouteWatch, a DNS blocklist
or AbuseIPDB, no rule file match and no Core Rule Set. The rate limits no
longer count it, and a banned or denied client gets 431 for it. In observe
mode no lookup is made for it. Requests within the limits go through the
same checks in the same order.

Model: opus-5-5

2026-11-11 00:26:14 +00:00

..

alerts

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

anomaly

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

bans

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

config

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

coreruleset

Core Rule Set: MediaWiki's password fields pass on a wiki in any language (closes #299)

2026-11-11 00:58:00 +01:00

discriminator

discriminator: the header limits are the first check (closes #311)

2026-11-11 00:26:14 +00:00

lookup

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

metrics

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

ratelimit

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

remotelog

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

reputation

Request tags, with refusing and limits per tag (closes #175)

2026-11-09 03:30:49 +01:00

requestlog

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

routewatch

Tests no longer connect to test servers they closed (closes #257)

2026-11-10 00:58:01 +01:00

rproxy

rproxy: send its own answers at once to a visitor that stops sending its body (closes #303)

2026-11-10 23:57:52 +01:00

rules

Rename the program to sww and its deciding daemon to discriminator (closes #218) (#221)

2026-11-07 06:51:06 +01:00

state

Name log fields, metrics and the Core Rule Set package for what they are (closes #192)

2026-11-09 08:47:26 +01:00

sww

Tests no longer connect to test servers they closed (closes #257)

2026-11-10 00:58:01 +01:00