SafeLine
SafeLine copied to clipboard
chaitin
serve as a reverse proxy to protect your web services from attacks and exploits.
### What happened? ### 设备环境 1. 系统;openwrt22.10-24.10.3 这几个版本都试过了，无论是自编译的还是istoreos都无法更新，其他docker程序 get数据正常 2. cpu：i3-1315u x86架构 3. 内存： 16G ### 使用原因 雷池+clamav+网关筛选组合小高防，后续重度使用准备购买专业版 ### 出现问题 目前从雷池9.2.3-9.2.6无论这么更新迭代版本都无法更新通用设置中的ip组，点击更新后显示如下报错： 日志中显示为 购买付费信息一直安装不上去，部署开源信息也是，会出现如下报错： ### How we reproduce? 1. 最简易的方式就是直接用istore的docker直接自动部署一个，yml部署也能复现该问题，求帮助，目前只能通过重安装的方式来进行更新，导致可用性大大下降 ###...
### Content ## Summary A configuration-based authentication bypass vulnerability exists in the SafeLine WAF management interface that disables authentication when the `NO_AUTH` environment variable is set during deployment. ## Vulnerability...
### What happened? 每次重启完服务器都报这个错。。，重装完，重启又报错。。 2025-09-17T13:52:26.387989405Z time="2025-09-17T21:52:26+08:00" level=error msg="AppendFSL: update failed: update framework failed" 2025-09-17T13:52:35.578367652Z time="2025-09-17T21:52:35+08:00" level=error msg="notify push fsl because policy 0 version is older than 108" ...
### What happened? 统计报销-拦截情况有拦截数量，攻击防护中攻击事件和攻击日志均没有数据 ### How we reproduce? 1. ... 2. ... 3. ... ### Expected behavior _No response_ ### Error log _No response_
### What would you like to be added or improved? 希望官方考虑为社区版下放区域访问功能，规则可限制一条供用户体验，若用户体验不错，可增加用户体量，使用过很多区域访问的工具，会造成无法访问网页的问题。希望官方考虑一下 ### Why is it needed? 进一步防止网页被恶意爬虫 恶意攻击 限制跨省访问
### What happened? I get this errors in the log after running safeline This configuration was working before [container-logs-2025-07-15T17-35-41.zip](https://github.com/user-attachments/files/21239911/container-logs-2025-07-15T17-35-41.zip) ``` safeline-detector | '/detector/snserver.yml' -> '/detector/detector.yml' safeline-detector | '/detector/libfusion2.so' -> '/detector/config/libfusion2.so'...
### What happened? 切换应用防护模式后，BOT防护未开启但请求仍被拦截，waf版本为9.2.1 ### How we reproduce? 1. 关闭应用的 BOT 防护功能； 2. 将应用防护模式切换为 “观察模式” 并保存配置； 3. 再次将应用防护模式切换回 “防护模式” 并保存配置； 4. 请求受防护的应用接口，此时请求被错误拦截，并返回 468状态码。 ### Expected behavior 当切换回“防护模式”且未开启 BOT 防护时，请求应被正常放行并访问成功。 ###...
### What would you like to be added or improved? When attempting to request a Let'sEncrypt SSL certificate, if there is an issue - the screen will quickly display a...
### What would you like to be added or improved? Several versions back, Applications were listed as a table/list which made it easy to find issues with a specific application....