mod_block.md

Introduction

Block incoming connection/request based on defined rules.

Configuration

• Module config file

  conf/mod_block/mod_block.conf

  [basic]
  # product rule config file path
  ProductRulePath = ../conf/mod_block/block_rules.data
  
  # global ip blacklist file path
  IPBlacklistPath = ../conf/mod_block/ip_blacklist.data
  

• Data config file

  • ip blacklist file

    conf/mod_block/ip_blacklist.data

    192.168.1.253 192.168.1.254
    192.168.1.250
    

  • block rules file

    conf/mod_block/block_rules.data

Config Item	Type	Description
Version	String	Verson of config file
Config	Struct	Block rules for each product. Block rule include: - Cond: "condition" expression - Action: what to do after matched - Name: rule name

Action	Description
CLOSE	Close the connection

```
{
  "Version": "20190101000000",
  "Config": {
      "example_product": [
          {
            "action": {
                  "cmd": "CLOSE",
                  "params": []
              },
              "name": "example rule",
              "cond": "req_path_in(\"/limit\", false)"            
          }
      ]
  }
}
```