diff --git a/www/nginx/src/opnsense/mvc/app/controllers/OPNsense/Nginx/forms/httpserver.xml b/www/nginx/src/opnsense/mvc/app/controllers/OPNsense/Nginx/forms/httpserver.xml index 8708b85bc..cbcbaf368 100644 --- a/www/nginx/src/opnsense/mvc/app/controllers/OPNsense/Nginx/forms/httpserver.xml +++ b/www/nginx/src/opnsense/mvc/app/controllers/OPNsense/Nginx/forms/httpserver.xml @@ -79,6 +79,13 @@ true Blocks files like .htaccess files or other files not intended for the public. + + httpserver.disable_bot_protection + + checkbox + false + Blocks the request when a possibly bad bot is detected and adds the originating IP to the managed firewall alias for permanent blocking. + httpserver.ip_acl diff --git a/www/nginx/src/opnsense/mvc/app/models/OPNsense/Nginx/Nginx.xml b/www/nginx/src/opnsense/mvc/app/models/OPNsense/Nginx/Nginx.xml index aebcf735b..c17b20b4b 100644 --- a/www/nginx/src/opnsense/mvc/app/models/OPNsense/Nginx/Nginx.xml +++ b/www/nginx/src/opnsense/mvc/app/models/OPNsense/Nginx/Nginx.xml @@ -1,6 +1,6 @@ //OPNsense/Nginx - 1.1.2 + 1.1.3 nginx web server, reverse proxy and waf @@ -558,6 +558,10 @@ 0 Y + + 0 + Y + 0 Y diff --git a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf index 39f1d911e..b3e6cf4f2 100644 --- a/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf +++ b/www/nginx/src/opnsense/service/templates/OPNsense/Nginx/http.conf @@ -130,6 +130,7 @@ server { root /var/etc/acme-client/challenges; } {% endif %} +{% if server.disable_bot_protection is not defined or server.disable_bot_protection != '1' %} # block based on User Agents - stuff I have found over the years in my server log if ($http_user_agent ~* Python-urllib|Nmap|python-requests|libwww-perl|MJ12bot|Jorgee|fasthttp|libwww|Telesphoreo|A6-Indexer|ltx71|okhttp|ZmEu|sqlmap|LMAO/2.0|ltx71|zgrab|Ronin/2.0|Hakai/2.0) { return 418; @@ -143,6 +144,7 @@ server { { return 418; } +{% endif %} {% if server.ip_acl is defined %} {% set ip_acl = server.ip_acl %} {% include "OPNsense/Nginx/ipacl.conf" %}