finding the LUA bug

This commit is contained in:
bunkerity 2021-04-13 17:01:27 +02:00
parent deeb7a76a2
commit b55aafb997
2 changed files with 41 additions and 33 deletions

View File

@ -22,17 +22,20 @@ function M.reverse_cached ()
end end
function M.check_ip () function M.check_ip ()
if #ip_list > 0 then
local blacklist = iputils.parse_cidrs(ip_list) local blacklist = iputils.parse_cidrs(ip_list)
if iputils.ip_in_cidrs(ip, blacklist) then if iputils.ip_in_cidrs(ip, blacklist) then
ngx.shared.blacklist_ip_cache:set(ip, "ko", 86400) ngx.shared.blacklist_ip_cache:set(ip, "ko", 86400)
ngx.log(ngx.WARN, "ip " .. ip .. " is in blacklist") ngx.log(ngx.WARN, "ip " .. ip .. " is in blacklist")
return true return true
end end
end
ngx.shared.blacklist_ip_cache:set(ip, "ok", 86400) ngx.shared.blacklist_ip_cache:set(ip, "ok", 86400)
return false return false
end end
function M.check_reverse () function M.check_reverse ()
if #reverse_list > 0 then
local rdns = dns.get_reverse() local rdns = dns.get_reverse()
if rdns ~= "" then if rdns ~= "" then
for k, v in ipairs(reverse_list) do for k, v in ipairs(reverse_list) do
@ -43,6 +46,7 @@ function M.check_reverse ()
end end
end end
end end
end
ngx.shared.blacklist_reverse_cache:set(ip, "ok", 86400) ngx.shared.blacklist_reverse_cache:set(ip, "ok", 86400)
return false return false
end end

View File

@ -22,17 +22,20 @@ function M.reverse_cached ()
end end
function M.check_ip () function M.check_ip ()
if #ip_list > 0 then
local whitelist = iputils.parse_cidrs(ip_list) local whitelist = iputils.parse_cidrs(ip_list)
if iputils.ip_in_cidrs(ip, whitelist) then if iputils.ip_in_cidrs(ip, whitelist) then
ngx.shared.whitelist_ip_cache:set(ip, "ok", 86400) ngx.shared.whitelist_ip_cache:set(ip, "ok", 86400)
ngx.log(ngx.WARN, "ip " .. ip .. " is in whitelist") ngx.log(ngx.WARN, "ip " .. ip .. " is in whitelist")
return true return true
end end
end
ngx.shared.whitelist_ip_cache:set(ip, "ko", 86400) ngx.shared.whitelist_ip_cache:set(ip, "ko", 86400)
return false return false
end end
function M.check_reverse () function M.check_reverse ()
if #reverse_list > 0 then
local rdns = dns.get_reverse() local rdns = dns.get_reverse()
if rdns ~= "" then if rdns ~= "" then
local whitelisted = false local whitelisted = false
@ -53,6 +56,7 @@ function M.check_reverse ()
end end
end end
end end
end
ngx.shared.whitelist_reverse_cache:set(ip, "ko", 86400) ngx.shared.whitelist_reverse_cache:set(ip, "ko", 86400)
return false return false
end end