feat: 调优 WAF 配置

2026-02-04 13:47:15 +08:00 · 2023-12-10 14:06:30 +08:00
parent cd27c05d1c
commit 3c82631d7b
1 changed files with 59 additions and 0 deletions
--- a/scripts/openresty/install.sh
+++ b/scripts/openresty/install.sh
@@ -363,6 +363,8 @@ http {
    server_tokens off;
    access_log off;

+    waf_http_status general=403 cc_deny=444;
+
    # 服务状态页
    server {
        listen 80;
@@ -505,6 +507,63 @@ cat > ${openrestyPath}/html/stop.html << EOF
 </html>
 EOF

+# 写入 WAF 拦截页（战未来，暂时无法生效）
+cat > ${openrestyPath}/html/block.html << EOF
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>请求被拦截 - 耗子Linux面板</title>
+    <style>
+        body {
+            background-color: #f9f9f9;
+            margin: 0;
+            padding: 0;
+        }
+        .container {
+            max-width: 800px;
+            margin: 2em auto;
+            background-color: #ffffff;
+            padding: 20px;
+            border-radius: 12px;
+            box-shadow: 0 4px 8px rgba(0, 0, 0, 0.1);
+        }
+        h1 {
+            font-size: 2.5em;
+            margin-top: 0;
+            margin-bottom: 20px;
+            text-align: center;
+            color: #333;
+            border-bottom: 2px solid #ddd;
+            padding-bottom: 0.5em;
+        }
+        p {
+            color: #555;
+            line-height: 1.8;
+        }
+        @media screen and (max-width: 768px) {
+            .container {
+                padding: 15px;
+                margin: 2em 15px;
+            }
+            h1 {
+                font-size: 1.8em;
+            }
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1>耗子Linux面板</h1>
+        <p>本次请求判断为危险的攻击请求，已被拦截！</p>
+        <p>当您看到此页面，说明您的请求被WAF拦截，可能是由于您的请求中包含了危险的攻击内容，或者您的请求被误判为攻击请求。</p>
+        <p>如果您认为这是误判，请联系服务器管理员解决。</p>
+    </div>
+</body>
+</html>
+EOF
+
 # 处理文件权限
 chmod -R 755 ${openrestyPath}
 chmod -R 755 /www/wwwroot