mirror of
https://github.com/TecharoHQ/anubis.git
synced 2026-04-10 18:48:44 +00:00
9f988578a4
This is a huge change to Anubis and will make it a lot more invisible at the cost of requiring additional server configuration to make it happen. If you add this bit of nginx config to your location block: ```nginx proxy_set_header X-Http-Version $server_protocol; ``` And then adjust the bottom bot rule to this: ```yaml - import: (data)/common/challenge-browser-like.yaml ``` Anubis will be way less aggressive than it was before. This will let through any traffic that comes from a browser that actually is a browser via some more advanced heuristics. I think that this rule alone is the key feature of v1.18.0. Signed-off-by: Xe Iaso <me@xeiaso.net>
16 lines
543 B
YAML
16 lines
543 B
YAML
# Challenge anything with HTTP/1.1 that claims to be a browser
|
|
- name: challenge-lies-browser-but-http-1.1
|
|
action: CHALLENGE
|
|
expression:
|
|
all:
|
|
- '"X-Http-Version" in headers'
|
|
- headers["X-Http-Version"] == "HTTP/1.1"
|
|
- >-
|
|
( userAgent.contains("Mozilla")
|
|
|| userAgent.contains("Opera")
|
|
|| userAgent.contains("Safari")
|
|
|| userAgent.contains("Edge")
|
|
|| userAgent.contains("Gecko")
|
|
|| userAgent.contains("Windows")
|
|
|| userAgent.contains("Linux")
|
|
) |