search

bukaleyang / zhongkui-waf

WAF based on lua-nginx-module.
Apache License 2.0
166 stars 42 forks source link

测试CC防护，未触发拦截。 #41

Closed Lijuming33 closed 6 months ago

Lijuming33 commented 6 months ago

钟馗面板，ip黑白名单均已关闭，CC防护打开后设置cc-ip每分钟阈值设置为3次，重启nginx刷新版本数据已保存。我局域网内81端口是openresty默认欢迎页，82代理81,85代理82，可以理解为85代理的81，浏览器访问127.0.0.1:85，高频访问85，没有触发CC拦截，使用局域网内其他设备（192.168.124.12）的80端口代理本机85端口，再次使用另一台设备高频访问http://192.168.124.12，也没有触发CC拦截。是我测试的方式不对吗？

Snipaste_2024-05-22_13-22-15

(base) w@XiaoXin-15-Air:/usr/local/openresty/nginx/zhongkui/conf$ cat sites.conf

server {
    listen 82;

    server_name 127.0.0.1;

    charset utf-8;

    location / {
        proxy_pass http://127.0.0.1:81;
        proxy_set_header  X-Real-IP  $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}
server {
    listen 85;

    server_name 127.0.0.1;

    charset utf-8;

    location / {
        proxy_pass http://127.0.0.1:82;
        proxy_set_header  X-Real-IP  $remote_addr;
        proxy_set_header  X-Forwarded-For $proxy_add_x_forwarded_for;
    }
}

以下是部分测试的日志。

2024/05/22 13:09:46 [error] 442517#442517: *2 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:46 [error] 442517#442517: *4 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:46 [error] 442517#442517: *6 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:46 [error] 442517#442517: *6 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:47 [error] 442517#442517: *7 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:47 [error] 442517#442517: *9 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:47 [error] 442517#442517: *11 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:47 [error] 442517#442517: *11 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:48 [error] 442517#442517: *12 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:48 [error] 442517#442517: *14 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:48 [error] 442517#442517: *16 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:48 [error] 442517#442517: *16 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:53 [error] 442517#442517: *17 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:53 [error] 442517#442517: *19 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:53 [error] 442517#442517: *21 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:53 [error] 442517#442517: *21 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:54 [error] 442517#442517: *22 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:54 [error] 442517#442517: *24 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:54 [error] 442517#442517: *26 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:54 [error] 442517#442517: *26 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:56 [error] 442517#442517: *27 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:56 [error] 442517#442517: *29 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:56 [error] 442517#442517: *31 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:56 [error] 442517#442517: *31 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:57 [error] 442517#442517: *32 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:09:57 [error] 442517#442517: *34 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:09:57 [error] 442517#442517: *36 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:09:57 [error] 442517#442517: *36 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:11 [error] 442517#442517: *37 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:10:11 [error] 442517#442517: *39 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:10:11 [error] 442517#442517: *41 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:11 [error] 442517#442517: *41 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:12 [error] 442517#442517: *42 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:10:12 [error] 442517#442517: *44 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:10:12 [error] 442517#442517: *46 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:12 [error] 442517#442517: *46 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:13 [error] 442517#442517: *47 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:10:13 [error] 442517#442517: *49 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:10:13 [error] 442517#442517: *51 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:13 [error] 442517#442517: *51 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:14 [error] 442517#442517: *52 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:10:14 [error] 442517#442517: *54 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:10:14 [error] 442517#442517: *56 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:14 [error] 442517#442517: *56 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:15 [error] 442517#442517: *57 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:not found, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:85"
2024/05/22 13:10:15 [error] 442517#442517: *59 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: 127.0.0.1, request: "GET / HTTP/1.0", host: "127.0.0.1:82"
2024/05/22 13:10:15 [error] 442517#442517: *61 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
2024/05/22 13:10:15 [error] 442517#442517: *61 [lua] geoip.lua:51: lookup(): failed to lookup by ip,reason:lookup failed: Name or service not known, client: 127.0.0.1, server: localhost, request: "GET / HTTP/1.0", host: "127.0.0.1:81"
Lijuming33 commented 6 months ago 
123

我问问