Skip to content

IPFilterRules: add anylocal and multicast keywords, fail on unparseable rules - #2119

Open
abhinav-phi wants to merge 1 commit into
apache:mainfrom
abhinav-phi:issue-2086-ipfilter-linklocal
Open

IPFilterRules: add anylocal and multicast keywords, fail on unparseable rules#2119
abhinav-phi wants to merge 1 commit into
apache:mainfrom
abhinav-phi:issue-2086-ipfilter-linklocal

Conversation

@abhinav-phi

Copy link
Copy Markdown
Contributor

Fixes #2086 (the part not already covered by #2077).

A rule which is neither a keyword, a CIDR block nor a single IP address was logged and dropped, silently widening what the crawler will connect to. Configuration now throws an IllegalArgumentException instead, so a typo in an exclude list stops the topology rather than removing a rule the operator believed was in force.

  • adds the anylocal and multicast keywords
  • documents linklocal in the class javadoc (it was added by Only follow robots.txt redirects on the same host #2077 but missing from the docs)
  • updates the commented example in crawler-default.yaml to also cover CGNAT and IPv6 unique-local space
  • invalidRuleIsIgnored is replaced by invalidRuleFailsConfiguration, which asserts the throw

…le rules (apache#2086)

A rule that is neither a keyword, a CIDR block nor a single address was
logged and dropped, silently widening what the crawler will connect to.
Configuration now fails with an IllegalArgumentException instead, so a
typo in an exclude list stops the topology rather than removing a rule
the operator believed was in force.

Adds the anylocal and multicast keywords, documents linklocal (already
present but missing from the javadoc), and updates the example in
crawler-default.yaml to also cover CGNAT and IPv6 unique-local space.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

IPFilterRules has no keyword for link-local addresses and the documented example leaves them allowed

1 participant