search

mitchellkrogza / nginx-ultimate-bad-bot-blocker

Nginx Block Bad Bots, Spam Referrer Blocker, Vulnerability Scanners, User-Agents, Malware, Adware, Ransomware, Malicious Sites, with anti-DDOS, Wordpress Theme Detector Blocking and Fail2Ban Jail for Repeat Offenders
Other
3.97k stars 477 forks source link

[BUG] probe-image-size UA blocked although requesting IP is in whitelist-ips.conf #433

Closed baumkirchner closed 2 years ago

baumkirchner commented 3 years ago

Describe the bug

The UserAgent probe-image-size/4.1.1 is being used by the BigBlueButton Video Conference System (which uses nginx as a reverse proxy) to display its whiteboard, but had been added to the global blacklist some time ago. Since then the whiteboard ist not displayed correctly as long as the mentioned user agent is not listed in custom whitelist, although the servers IP from which the requests come is listed in the whitelist-ips.conf. As soon as i add this UA to my custom UA white list, everything is fine. But i'm wondering because shouldn't the whitelist-ips.conf avoid such problems? Is it the intended behavior that the global blacklist overwrites the whitelist-ips.conf's settings?

To Reproduce

Expected behavior

With an IP whitelisted i expected not to block any requests coming from that IP

Server (please complete the following information):

16.04

nginx/1.16.1

nginx access log ... HTTP/1.1" 444 0 "-" "probe-image-size/4.1.1(+https://github.com/nodeca/probe-image-size)"

mitchellkrogza commented 3 years ago

Whitelist the UA in addition to the IP add this UA to the blacklist-user-agents file which is a white & blacklist