fix(waf): continue-on-error + timeout 1s + alle CRS-Dateien — v1.2.73
- SPOE-Config: option continue-on-error — HAProxy blockt nie wegen SPOE-Timeout (z.B. CRS-Engine-Load beim ersten Request). Ohne dieses Flag waren alle Requests geblockt wenn der WAF-Agent kurz nicht antwortete, auch für Domains ohne WAF-Konfiguration. - SPOE-Config: timeout processing 50ms → 1s — CRS-Load braucht >50ms - postinst: *.conf → * beim CRS-Copy — .data-Dateien wurden nicht mitkopiert, SecRule @pmFromFile scanners-user-agents.data fehlte Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -812,7 +812,7 @@ EOSQL
|
||||
CRS_SRC="${CRS_TMP}/coreruleset-${CRS_VERSION}"
|
||||
if [ -f "${CRS_SRC}/crs-setup.conf.example" ]; then
|
||||
install -m 0644 "${CRS_SRC}/crs-setup.conf.example" "${WAF_CRS_DIR}/crs-setup.conf"
|
||||
install -m 0644 "${CRS_SRC}/rules/"*.conf "${WAF_CRS_DIR}/rules/" 2>/dev/null || true
|
||||
install -m 0644 "${CRS_SRC}/rules/"* "${WAF_CRS_DIR}/rules/" 2>/dev/null || true
|
||||
chown -R "$EG_USER":"$EG_USER" "$WAF_CRS_DIR"
|
||||
echo "postinst: OWASP CRS v${CRS_VERSION} installed to ${WAF_CRS_DIR}"
|
||||
else
|
||||
|
||||
Reference in New Issue
Block a user