Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

@rbl operator does not support IPv6 #3131

Open
airween opened this issue Apr 24, 2024 · 0 comments
Open

@rbl operator does not support IPv6 #3131

airween opened this issue Apr 24, 2024 · 0 comments
Assignees
Labels
2.x Related to ModSecurity version 2.x 3.x Related to ModSecurity version 3.x bug It is a confirmed bug duplicate Ops. Somebody else already hit that bump 🥇 good first issue

Comments

@airween
Copy link
Member

airween commented Apr 24, 2024

Describe the bug

This is a duplicated issue, the first one is more that 4 years old - see #2210.

Seems like @rbl operator does not support IPv6.

There was the issue #3111, during the investigation I found this behavior.

Logs and dumps

This is what I found the log while I tried the operator:

libmodsecurity3:

Target value: "::1" (Variable: REMOTE_ADDR)
Failed to understand `::1' as a valid IP address, assuming domain format input
RBL lookup of ::1 failed.

mod-security2:

Target value: "::1"
RBL lookup of ::1.xbl.spamhaus.org failed at REMOTE_ADDR.

The expected format would be:

1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ipv6.xbl.spamhaus.org

To Reproduce

Use the rule set given at this issue comment, and send a request:

curl -H "Host: localhost" http://[::1]/

Expected behavior

In the log it should be the expected format above, eg:

RBL lookup of 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ipv6.xbl.spamhaus.org failed at REMOTE_ADDR.

Server (please complete the following information):

  • ModSecurity version (and connector): libmodsecurity3 all versions, mod_security2 all versions
@airween airween added bug It is a confirmed bug 2.x Related to ModSecurity version 2.x 3.x Related to ModSecurity version 3.x duplicate Ops. Somebody else already hit that bump labels Apr 24, 2024
@airween airween self-assigned this Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
2.x Related to ModSecurity version 2.x 3.x Related to ModSecurity version 3.x bug It is a confirmed bug duplicate Ops. Somebody else already hit that bump 🥇 good first issue
Projects
None yet
Development

No branches or pull requests

1 participant