From bc87c6215c978155b15d0d86187693c216d30119 Mon Sep 17 00:00:00 2001 From: Oliver Valls <199462+tramuntanal@users.noreply.github.com> Date: Tue, 30 Jan 2024 16:32:24 +0100 Subject: [PATCH] Blocklist each ip separately --- config/initializers/rack_attack.rb | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index acacdbb6..0e47c07c 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -1,6 +1,6 @@ # frozen_string_literal: true -unless %w(development test).include? Rails.env +# unless false && %w(development test).include? Rails.env require "rack/attack" limit= ENV["RACK_ATTACK_THROTTLE_LIMIT"] || 30 @@ -22,8 +22,12 @@ end end - Rack::Attack.blocklist_ip(ENV["RACK_ATTACK_BLOCKED_IPS"].split(",")) if ENV["RACK_ATTACK_BLOCKED_IPS"].present? -end + if ENV["RACK_ATTACK_BLOCKED_IPS"].present? + ENV["RACK_ATTACK_BLOCKED_IPS"].split(",").each do |ip_or_subnet| + Rack::Attack.blocklist_ip(ip_or_subnet) + end + end +# end __END__ headers= []