Starstruk Logo MarkStarstruk

v7.0.1

chaitin/SafeLinev7.0.1Oct 21, 2024by xbingW

AI Summary

SafeLine-CE 7.0.1 enhances allowlist functionality to detect and record attacks, introduces customizable challenges and HA synchronization for Pro users, and fixes multiple issues regarding SSL, site configuration, and error logs.

Key Highlights

  • Allowlist now detects and records attack requests.
  • Pro version allows customizing challenge pages and sliding verification.
  • Pro version enables HA synchronization between master and slave nodes.
  • Fixes SSL cipher reset and static site subdirectory access issues.
  • Fixes X-Forwarded-Host header handling.

New Features

  • Allowlist adds 'detecting and recording attack requests when whitelisting'
  • Allow Enable/Disable enhanced rules
  • Pro version allow customizing the page of challenge
  • Pro version allow choosing sliding verificaiton
  • Pro version allow HA synchronizatio

Full Release Notes

### Improvements
* Allowlist adds  "detecting and recording attack requests when whitelisting" . Attack log of allowlist add the name of the Rule
* Allow Enable/Disable enhanced rules. Pro version allow advaned security rules, or further configuration of rules
* Improve Challenge
    * Pro version allow customizing the page of challenge
    * Pro version allow choosing sliding verificaiton, allow modifying the validity period of the verification
* Pro version allow HA synchronizatio by setting master node and slave node in System Settings -> Configuration Synchronization
* Optimize error log when tengine is abnormal

### Fix
* Update IP geolocation library and fix some IP geolocation display errors
* Fix the problem that static sites cannot access subdirectory paths normally
* Fix the problem that the attack log is not correctly recorded as whitelist release when low-risk events hit the whitelist
* Fix the problem that X-Forwarded-Host is set to $http_host by default when passing it to the upstream server
* Fix the problem of incorrect resource settings for site resource collection exclusion
* Fix the problem that the site configuration is lost abnormally after ssl_ciphers is saved
* Remove bridge container (merge into mgt)