VCC-compiler: Syntax error for breach

[DaiYamatta]

enable include "/etc/varnish/security/breach.vcl";

this code is syntax error.

varnishd -d -f default.vcl Message from VCC-compiler: Syntax error at ('/etc/varnish/security/breach/40_generic_attacks.vcl' Line 5 Pos 78) if(req.http.Cookie ~ "(?:(?:[\;|]\W*?\bcc|\b(wget|curl))\b|\/cc(?:[\'\"|\;-\s]|$))"){ -----------------------------------------------------------------------------#-----------------

Running VCC-compiler failed, exit 1

VCL compilation failed

varnishd -d -f /etc/varnish/default.vcl Message from VCC-compiler: Expected ')' got 'validateUtf8Encoding' (program line 73), at ('/etc/varnish/security/breach/20_protocol_violations.vcl' Line 256 Pos 15) if(req.url validateUtf8Encoding ""){ --------------####################-----

Running VCC-compiler failed, exit 1

VCL compilation failed

varnishd -d -f /etc/varnish/default.vcl Message from VCC-compiler: Unknown token '%' when looking for BOOL

('/etc/varnish/security/breach/30_http_policy.vcl' Line 5 Pos 8) if((%{tx.allowed_methods}) ~ "req.request"){ -------#---------------------------------------

Running VCC-compiler failed, exit 1

VCL compilation failed

as is code comment out is running !!

[comotion]

Hey Dai, thanks for the notice yeah the breach module is not precisely tip top since the port to V3.0 and the introduction of some new mod_security features. I will hack on it some when I get a chance, til then I recommend you use the standard VCL modules shipped with security.vcl.

[comotion]

wait, did you say these are the only three errors and if you comment them out it works?

[DaiYamatta]

Dear comotion

wait, did you say these are the only three errors and if you comment them out it works?

yes!! runnnig.

test enviroment is Scientific Linux 6.1 x86_64. Need more information?

[comotion]

good to hear! 5a337108e1052c8b230e9c7b708504888d6010c9 pushes a fix that skips emitting rules for validateUtf8Enoding, since we have to implement that in the upcoming sec.vcl VMOD. %{tx.allowed_methods} is going to be trickier since I'll have to put something badass together in perl to resolve variables, while the regex "(?:(?:[\;|]\W*?\bcc|\b(wget|curl))\b|\/cc(?:[\'\"|\;-\s]|$))" I dunno what's wrong here... the regex is straight from the breach ruleset and it seems to complain on valid regex..