1 Release published by 1 person

• v6.9.0 SafeLine-CE 6.9.0

  published Sep 13, 2024

188 Issues closed by 7 people

• [SUGGESTION] add NOT CIDR in Custom Rules 'Source IP'

  #980 closed Sep 19, 2024

• [Suggestion] Count attacks for each IP in an attack event

  #988 closed Sep 19, 2024

• [Suggestion] Output the attack IPs to the firewall to block the IPs

  #1008 closed Sep 19, 2024

• [Feature] need config captcha verified timout

  #1016 closed Sep 19, 2024

• [Feature] supports totp 2fa in auth challenge

  #1025 closed Sep 19, 2024

• [Bug] Failed to connect to postgresql DB

  #1041 closed Sep 19, 2024

• [Feature] supports multi files uploading when serve a web service as static files

  #1043 closed Sep 19, 2024

• [Bug] Wrong Display of region

  #1051 closed Sep 19, 2024

• [Bug] nginx illegal config file

  #1068 closed Sep 19, 2024

• [Suggestion] Local deployment of human-machine verification

  #1056 closed Sep 19, 2024

• [Bug] https://chaitin.cn/dev/go/errors?go-get=1: 404 Not Found

  #1066 closed Sep 19, 2024

• [Suggestion] only specific ip address group or rule can access a website

  #1073 closed Sep 19, 2024

• [建议] nginx中添加http_set_misc模块

  #319 closed Sep 19, 2024

• [优化建议] 高频攻击限制时长延长

  #334 closed Sep 19, 2024

• [建议] 黑白名单可批量导入

  #336 closed Sep 19, 2024

• [建议] nginx 重定向 / 支持设置站点响应方式为重定向

  #340 closed Sep 19, 2024

• [建议] 支持重大会议及活动期间，夜间定时自动开启维护模式

  #346 closed Sep 19, 2024

• [建议] 希望黑白名单/自定义规则中的匹配目标可以添加端口或者指定站点

  #347 closed Sep 19, 2024

• [建议] 添加站点是检测上游服务器的网络是否联通功能

  #348 closed Sep 19, 2024

• [建议]站点列表支持更方便地复制域名

  #422 closed Sep 19, 2024

• [建议] 建议能查看来访IP。。

  #487 closed Sep 19, 2024

• 数据统计里面的数据不对[Bug]

  #493 closed Sep 19, 2024

• 测试使用slow header慢速CC攻击，在雷池waf上看不到攻击日志

  #494 closed Sep 19, 2024

• [建议] 攻击事件列表显示优化-前端���示攻击 ip 的 ip 组信息

  #495 closed Sep 19, 2024

• [建议] 新增metrics接口，便于在grafana及prometheus接入及展示

  #521 closed Sep 19, 2024

• [建议] 黑白名单支持ASN号段导入

  #222 closed Sep 19, 2024

• [建议] 异常流量转发蜜罐

  #202 closed Sep 19, 2024

• [建议] 增加后台登录日志

  #218 closed Sep 19, 2024

• [建议] 通过界面进行站点与系统配置的备份与还原

  #90 closed Sep 19, 2024

• 首页 访问来源地区-仅拦截 支持跳转到相应检测日志 / 检测日志支持按地理位置筛选

  #140 closed Sep 19, 2024

• 数据统计按站点查看

  #146 closed Sep 19, 2024

• [建议] 能否针对检测日志增加关注功能

  #154 closed Sep 19, 2024

• [建议] 可以自定义设置拦截响应

  #165 closed Sep 19, 2024

• [建议] 希望增加自定义Nginx参数功能，或融合nginxWebUI等工具

  #167 closed Sep 19, 2024

• [建议] 增加批量拉黑的功能

  #168 closed Sep 19, 2024

• [建议] 【攻击事件】支持 分类/排序，搭配预警通知

  #174 closed Sep 19, 2024

• [建议] 希望可以通过API修改回源IP / OpenAPI

  #196 closed Sep 19, 2024

• [suggestion] Config Rate Limiting by host or website or urlpath / 频率限制基于 host 或站点或 URL

  #209 closed Sep 19, 2024

• [建议] 攻击事件攻击IP应标记已加入IP组

  #215 closed Sep 19, 2024

• [建议] 增加基于token或其令牌方式的api认证

  #216 closed Sep 19, 2024

• [建议] 防护站点模块增加禁用状态

  #217 closed Sep 19, 2024

• [建议] 攻击事件-原始日志中的攻击类型如果是黑名单希望改成黑名单的名称 / 日志列表展示黑名单日志的命中规则名称

  #287 closed Sep 19, 2024

• [建议] 站点多端口交互优化建议

  #240 closed Sep 19, 2024

• [建议] 强制 HTTPS 功能建议基于站点开启

  #241 closed Sep 19, 2024

• [建议] 站点列表显示上游服务器

  #250 closed Sep 19, 2024

• [建议] 基于Nginx处理静态文件性能优势

  #251 closed Sep 19, 2024

• [建议] 人机交互界面希望可以添加倒计时功能

  #258 closed Sep 19, 2024

• [建议] 希望增加黑白名单的事件计数

  #262 closed Sep 19, 2024

• [建议] 支持在雷池上直接通过配置静态资源来添加静态站点

  #266 closed Sep 19, 2024

• [建议] 优化日志筛选的交互 / 排除筛选

  #269 closed Sep 19, 2024

• [建议] 频率限制菜单，新增定时开关

  #272 closed Sep 19, 2024

• [建议] 添加简单URL鉴权功能，实现后台登录或特定路径访问更隐秘安全

  #276 closed Sep 19, 2024

• [建议] 防护站点 观察模式 已放行 统计 / 统计观察模式下的站点被检测为攻击但放行了的请求

  #281 closed Sep 19, 2024

• [建议] 攻击类型统计

  #286 closed Sep 19, 2024

• [建议] 支持配置 XFF 解析规则，当使用多层CDN时，无法准确获取真实客户端IP

  #301 closed Sep 19, 2024

• [建议] 是否能根据黑白名单自定义返回内容的格式？

  #543 closed Sep 19, 2024

• 对于黑名单ip最多可以添加多少个

  #548 closed Sep 19, 2024

• [Bug] php 后台登录概率性不成功

  #549 closed Sep 19, 2024

• [建议] 希望增加首页访问来源地图可以点进去进一步查看IP归属地等与对应访问日志功能

  #551 closed Sep 19, 2024

• 没有事实的记录攻击时间[Bug]

  #555 closed Sep 19, 2024

• [建议] 增加按站点、按时间段查历史询访问量、访问信息、拦截信息的功能

  #568 closed Sep 19, 2024

• [建议] 新增server块自定义配置文件

  #580 closed Sep 19, 2024

• [建议] 页面上增加SSL算法配置

  #585 closed Sep 19, 2024

• [建议] 证书管理 增加备注

  #586 closed Sep 19, 2024

• [建议] 希望能够支持对接到百川的蜜罐

  #593 closed Sep 19, 2024

• [Bug] 域名和证书相同在证书页面仍会提示域名不匹配

  #596 closed Sep 19, 2024

• [建议]添加高频拦截和人机验证拦截的IP排名

  #597 closed Sep 19, 2024

• 防护站点显示资源被访问的请求数，只有总的路径对应的资源请求数，为什么不能根据域名分类再显示各个域名哪些路径被访问了多少量

  #599 closed Sep 19, 2024

• 我根据官方文档将waf日志通过fluentd容器吐到syslog server时容器总是报错

  #603 closed Sep 19, 2024

• [建议] 建议添加IPV6的归属地显示

  #612 closed Sep 19, 2024

• [建议] 人机验证拦截的数据希望攻击日志能够查看

  #613 closed Sep 19, 2024

• 防护站点比较多，建议增加防护站点分组功能

  #139 closed Sep 19, 2024

• 当有大批量扫描的时候，进行 webhook 等方式的通知 / webhook 告警

  #138 closed Sep 19, 2024

• 支持配置管理页面允许登录的 IP 地址 / 登录 IP 白名单 / Restrict Admin Access by IP Address

  #137 closed Sep 19, 2024

• 首页数据统计显示4xx、5xx的功能问题

  #136 closed Sep 19, 2024

• 支持同一域名按照不同路径设置不同的上游服务器

  #131 closed Sep 19, 2024

• 支持自定义插件

  #129 closed Sep 19, 2024

• response_body能否返回attack_type和risk_level信息

  #158 closed Sep 19, 2024

• [Suggestion] TCP proxy (non-http proxy) / 支持tcp和udp转发 / 支持四层代理转发

  #123 closed Sep 19, 2024

• 管理页面 提示说明建议

  #121 closed Sep 19, 2024

• 建议检测日志列表更换排列，例如把时间放在第一列

  #119 closed Sep 19, 2024

• 关联微信公众号进行攻击告警提示

  #109 closed Sep 19, 2024

• 希望支持黑名单的日志和其他攻击的日志拆分开展示 or 存储

  #105 closed Sep 19, 2024

• 希望能web界面能增加访问统计（TOP10_IP/TOP_URI）

  #89 closed Sep 19, 2024

• 能否增加检测日志删除功能 / 自动清理历史日志 / 设置日志保留时间

  #63 closed Sep 19, 2024

• 自定义规则（黑白名单）可选择是否记录日志

  #34 closed Sep 19, 2024

• 经过雷池反代后，host无法匹配

  #675 closed Sep 19, 2024

• Rate Limited for each website on SafeLine's management interface

  #683 closed Sep 19, 2024

• [建议] 可以修改header里面Server的内容

  #687 closed Sep 19, 2024

• [建议] 降低人机验证的识别难度或改用更友好的交互

  #693 closed Sep 19, 2024

• [建议] 支持api操作

  #700 closed Sep 19, 2024

• [建议] 支持纯 ipv6 环境安装

  #701 closed Sep 19, 2024

• [建议] 雷池社区版管理端页面适配手机浏览

  #709 closed Sep 19, 2024

• [建议] 后台管理页面安全问题

  #713 closed Sep 19, 2024

• [建议] 身份认证功能建议支持多用户

  #722 closed Sep 19, 2024

• 优化cdn用户获取真实ip的功能

  #725 closed Sep 19, 2024

• [建议] 疑似nginx的gzip未生效

  #730 closed Sep 19, 2024

• [Bug] 补充规则无法修改，产生误报无法关闭规则

  #736 closed Sep 19, 2024

• [建议] 跟higress官方合作下 集成waf插件到云原生网关中

  #737 closed Sep 19, 2024

• [建议] DDNS转IP白名单规则

  #738 closed Sep 19, 2024

• [建议] 在添加站点处 ， 能否增加一个日志开关按钮 ，用于统计按钮 利于业务上线测试

  #741 closed Sep 19, 2024

• [Suggestion] Supports HTTP/3 / 支持 HTTP3

  #743 closed Sep 19, 2024

• [建议] 5.0.0 强制用户使用账号密码登录，能否改为可选项功能，由使用者自己选择是否开启？

  #749 closed Sep 19, 2024

• [建议] 【防护站点→站点详情】页面的最近访问时间能否放出时分秒

  #751 closed Sep 19, 2024

• [建议] 防护站点拦截请求数量，支持查看具体日志内容

  #753 closed Sep 19, 2024

• [建议] 高频访问这里增加访问的域名

  #223 closed Sep 19, 2024

• [建议] I have some advice to add a function that refuses response that included individual information. / 拦截包含敏感信息的响应

  #224 closed Sep 19, 2024

• [建议] 443端口支持UDP

  #356 closed Sep 19, 2024

• [建议] 高频访问限制 / 频率限制支持设置排除的资源类型

  #358 closed Sep 19, 2024

• [建议] 支持接收PROXY Protocol，方便的获取真实IP

  #359 closed Sep 19, 2024

• [建议] 站点详情易用度问题 / 通配站点的图标和业务资源会合并显示的问题

  #365 closed Sep 19, 2024

• [建议] 希望控制台的SSL证书可以下载后安装

  #372 closed Sep 19, 2024

• [建议] DDNS域名回源场景优化 / 动态解析 upstream 的域名

  #384 closed Sep 19, 2024

• [Bug] 开启ssl_stapling后的异常

  #385 closed Sep 19, 2024

• [建议] 申请免费证书可否用ecc算法

  #400 closed Sep 19, 2024

• [建议] 可单独控制HSTS开关

  #407 closed Sep 19, 2024

• [Bug] 站点详情中资源的今日请求量总和大于站点今日请求量

  #410 closed Sep 19, 2024

• [建议] 频率限制合并统计某 IP 已限制情况，方便直接拉黑

  #415 closed Sep 19, 2024

• [建议]支持自定义静态文件网站部署和自定义后端接口转发

  #424 closed Sep 19, 2024

• [建议] 频率限制增加自动加入黑名单 / 高频访问或攻击后永久封禁

  #428 closed Sep 19, 2024

• [建议] 希望白名单可以针对某一攻击类型加白

  #430 closed Sep 19, 2024

• [建议] 希望能源 IP 获取方式能设置多个或是站点可以分别设置

  #436 closed Sep 19, 2024

• nginx 监听 ipv6 端口，报错

  #474 closed Sep 19, 2024

• [Bug] 已正确配置防护站点，后续编辑站点更改域名时出现环路现象

  #479 closed Sep 19, 2024

• [建议] 在使用APISIX chaitin-waf插件实现检测且有自定义防护规则时，不再需要配置站点

  #480 closed Sep 19, 2024

• ]我希望可以在数据统计可以添加上实时回源和实时网站流量不是只能看实时 QPS [建议]

  #481 closed Sep 19, 2024

• [Bug] 人机验证在夸克浏览器上无法图片识别

  #482 closed Sep 19, 2024

• [Bug] 人机验证在 windows 版本的钉钉客户端的内置浏览器上图片识别无法旋转

  #483 closed Sep 19, 2024

• [建议] 支持自定义站点监听的 ip 地址

  #527 closed Sep 19, 2024

• 新版本nginx无法使用allowed_origin变量

  #533 closed Sep 19, 2024

• 站点防护模式切，防护失效，二次切换才生效

  #535 closed Sep 19, 2024

• [建议] 配置导出、转换

  #539 closed Sep 19, 2024

• [建议] 希望能支持使用自定义URL的mysql数据库

  #540 closed Sep 19, 2024

• [建议] 希望可以支持经过身份验证的来源拉取

  #624 closed Sep 19, 2024

• [建议] 是否能在搜索中增加ip段的搜索，或者智能ip段分析

  #626 closed Sep 19, 2024

• [建议] 增加拦截上游服务器返回的4xx/5xx状态页面的功能

  #629 closed Sep 19, 2024

• [建议] 增加弱口令识别控制功能，特别是admin 123456一类的口令

  #631 closed Sep 19, 2024

• [建议] 新增“在线订阅IP组自定义更新时间”功能

  #633 closed Sep 19, 2024

• [建议] 允许用户分别对 IPV4 与 IPV6 指定获取源 IP 的 Header

  #634 closed Sep 19, 2024

• [Bug] 日志按日保存配置后无效。

  #638 closed Sep 19, 2024

• [建议] 希望可以使用 ! 筛选排除日志

  #640 closed Sep 19, 2024

• [建议] 提供一个 GitHub 镜像版本脚本

  #641 closed Sep 19, 2024

• [Bug] websocket无法连接

  #643 closed Sep 19, 2024

• 防护站点大量域名添加的困扰及建议[Bug]

  #645 closed Sep 19, 2024

• [建议] 提供批量加入IP组的功能

  #646 closed Sep 19, 2024

• [建议] waf前端可看到正常国外ip信息，但是字段里是英文简称

  #647 closed Sep 19, 2024

• [建议] 通过配置的规则（黑白名单人机验证等）来限频

  #654 closed Sep 19, 2024

• [建议] 增加勾选双向ssl证书认证

  #655 closed Sep 19, 2024

• [建议] 证书自动续签

  #657 closed Sep 19, 2024

• [建议] 支持 Unix domain socket

  #659 closed Sep 19, 2024

• [Bug] 经过WAF的图片会被增加No-Gzip-Compression: true，导致上传图片url解析失败

  #666 closed Sep 19, 2024

• [建议] 期望可以在没有tengine容器时也能正常修改配置

  #668 closed Sep 19, 2024

• [建议] 支持调整Gzip压缩率

  #669 closed Sep 19, 2024

• [Bug] 软件升级或者对防护站点进行编辑后，nginx相关配置文件恢复默认，造成网站不能正常访问的问题。

  #752 closed Sep 19, 2024

• [建议] 模态窗不应该点击空白处关闭

  #761 closed Sep 19, 2024

• [建议] 补充规则应该直接下放到社区版

  #763 closed Sep 19, 2024

• [建议]5.x版本的两步验证开关，若干问题合集

  #771 closed Sep 19, 2024

• [建议] 证书增加使用路径导入方式

  #782 closed Sep 19, 2024

• [建议] 支持统计7天内网站访问情况

  #785 closed Sep 19, 2024

• [建议] 添加最低tls版本选项

  #788 closed Sep 19, 2024

• [建议] 默认的账号名可以修改

  #795 closed Sep 19, 2024

• [Bug] nginx无法修改文件上传大小限制

  #801 closed Sep 19, 2024

• [建议] 建议在站点页面加一列ID

  #803 closed Sep 19, 2024

• 网站访问异常

  #806 closed Sep 19, 2024

• [建议] 身份认证添加二步验证功能

  #815 closed Sep 19, 2024

• [建议] 攻击事件和原始日志增加已读和未读的区分

  #826 closed Sep 19, 2024

• [建议] 攻击日志增加基于IP组筛选

  #835 closed Sep 19, 2024

• [建议] 希望nginx集成ja3指纹

  #852 closed Sep 19, 2024

• [建议] 证书管理新增自定义的名称字段

  #856 closed Sep 19, 2024

• [建议] 支持将源 IP 设置到特定header中，向上游服务器传输

  #865 closed Sep 19, 2024

• [建议] 关于人机验证用户体验问题

  #866 closed Sep 19, 2024

• [建议] 后端是动态域名时无法代理

  #893 closed Sep 19, 2024

• [建议] 频率限制日志 支持按时间过滤

  #904 closed Sep 19, 2024

• [建议] 清理数据库日志建议增加周期限制功能

  #910 closed Sep 19, 2024

• [建议] 添加站点的时���上游服务器希望能添加多个端口

  #923 closed Sep 19, 2024

• [建议] 按量付费的服务器使用雷池后，流量消耗变大了

  #663 closed Sep 19, 2024

• [建议] 在站点编辑页面增加开启 OCSP stapling 的选项

  #929 closed Sep 19, 2024

• [Bug] 文件上传被限制大小，配置的参数无法生效

  #930 closed Sep 19, 2024

• [Suggestion] 功能建议

  #1005 closed Sep 19, 2024

• [Bug] 开启html动态加密后，系统页面出现错误。

  #1000 closed Sep 19, 2024

• [Suggestion] 改进切换控制台界面证书时默认自签证书的删除流程

  #1012 closed Sep 19, 2024

• [Suggestion] nginx自定义内容

  #1028 closed Sep 19, 2024

• 升级后proxy_set_header Accept-Encoding ""配置丢失

  #1033 closed Sep 19, 2024

• [Bug] 申请二级域名免费证书失败

  #1046 closed Sep 19, 2024

• [Bug] 开启了监听ipv6协议导致ipv4无法访问

  #1065 closed Sep 19, 2024

• [Bug] mgt容器的ip组任务报错和luigi健康检测报错

  #1072 closed Sep 19, 2024

• [Bug] nginx: [emerg] invalid number of arguments

  #1070 closed Sep 19, 2024

• [Bug] 升级到6.9.0后，各种提示/api/ 502错误

  #1067 closed Sep 13, 2024

7 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [建议] 目录遍历扫描封禁 / 检测大量 404 请求时封禁

  #420 commented on Sep 14, 2024 • 0 new comments

• [suggestion] Upstream server health check shutdown function

  #916 commented on Sep 17, 2024 • 0 new comments

• 支持Arm64平台 / arm

  #56 commented on Sep 18, 2024 • 0 new comments

• SafeLine English translation request

  #600 commented on Sep 19, 2024 • 0 new comments

• [Suggestion] Support configuring path in upstream server

  #792 commented on Sep 19, 2024 • 0 new comments

• [Suggestion] initialization script create the "/usr/local/nginx/html" directory

  #998 commented on Sep 19, 2024 • 0 new comments

• Helm chart for Safeline

  #274 commented on Sep 19, 2024 • 0 new comments