beenull/crowdsec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

warn user when setting unexpected default_remediation

Browse source
This commit is contained in:
bui 2023-10-20 13:32:20 +02:00
parent 0acda36d33
commit 5dbc2758fa
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
pkg/waf/waap.go
View file

@ -84,9 +84,9 @@ type WaapConfig struct {
} }
func (w *WaapRuntimeConfig) ClearResponse() { func (w *WaapRuntimeConfig) ClearResponse() {
log.Infof("#-> %p", w) log.Debugf("#-> %p", w)
w.Response = WaapTempResponse{} w.Response = WaapTempResponse{}
log.Infof("-> %p", w.Config) log.Debugf("-> %p", w.Config)
w.Response.Action = w.Config.DefaultPassAction w.Response.Action = w.Config.DefaultPassAction
w.Response.HTTPResponseCode = w.Config.PassedHTTPCode w.Response.HTTPResponseCode = w.Config.PassedHTTPCode
w.Response.SendEvent = true w.Response.SendEvent = true
@ -110,6 +110,12 @@ func (wc *WaapConfig) Load(file string) error {
if wc.DefaultRemediation == "" { if wc.DefaultRemediation == "" {
return fmt.Errorf("default_remediation cannot be empty") return fmt.Errorf("default_remediation cannot be empty")
} }
switch wc.DefaultRemediation {
case "ban", "captcha", "log":
//those are the officially supported remediation(s)
default:
wc.Logger.Warningf("default '%s' remediation of %s is none of [ban,captcha,log] ensure bouncer compatbility!", wc.DefaultRemediation, file)
}
if wc.BlockedHTTPCode == 0 { if wc.BlockedHTTPCode == 0 {
wc.BlockedHTTPCode = 403 wc.BlockedHTTPCode = 403
} }