v6.10.2
chaitin/SafeLinev6.10.2Sep 27, 2024by xbingW
AI Summary
SafeLine-CE 6.10.2 adds 'Limit High-Frequency Error' to block clients with excessive error requests, improves SSL certificate management, and enhances IP geolocation. It also optimizes the log processing module and fixes data recording issues.
Key Highlights
- Adds 'Limit High-Frequency Error' to prevent brute force and directory traversal.
- SSL Cert allows renewing the free cert in advance.
- Attack logs and events support fuzzy IP queries.
- Built-in cert returns on missing SSL site to prevent domain name leakage.
- Challenge page displays language based on browser settings.
New Features
- Limit High-Frequency Error
- Attack IP allow fuzzy query
- Challenge (Anti-Bot) page display CN or EN according to the browser language
Full Release Notes
#### Improvements * Add Limit High-Frequency Error. Allow blocking clients that request a large number of errors. It can effectively prevent attacks such as directory traversal and 401 (HTTP Basic Auth) brute force: #### Fix * If a request is judged as an attack, but released because whitelist, it will now be recorded. The attack type will be recorded as 'Allow List' * SSL Cert allow renewing the free cert in advance * In Attacks Events and Attack Logs, Attack IP allow fuzzy query ([#378](https://github.com/chaitin/SafeLine/issues/378)) * When a ssl site does not exist (SafeLine cannot find the host) , return a built-in cert to avoid leaking domain name ([#978](https://github.com/chaitin/SafeLine/issues/978)) * Challenge (Anti-Bot) page display CN or EN according to the browser language now. * Optimize the log processing module, remove container mario, improve performance and reduce resource usage.