From 3f9cf278534b7e8051590767c682a0114c5f6907 Mon Sep 17 00:00:00 2001 From: "Sergey G. Brester" Date: Tue, 11 May 2021 13:47:48 +0200 Subject: [PATCH] filter.d/apache-fakegooglebot.conf: better, more precise regex and datepattern (closes possible weakness like #3013) --- config/filter.d/apache-fakegooglebot.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/filter.d/apache-fakegooglebot.conf b/config/filter.d/apache-fakegooglebot.conf index 729410ad..ee23656a 100644 --- a/config/filter.d/apache-fakegooglebot.conf +++ b/config/filter.d/apache-fakegooglebot.conf @@ -2,11 +2,11 @@ [Definition] -failregex = ^ .*Googlebot.*$ +failregex = ^\s* \S+ \S+(?: \S+)?\s+\S+ "[A-Z]+ /\S* [^"]*" \d+ \d+ \"[^"]*\" "[^"]*\bGooglebot/[^"]*" ignoreregex = -datepattern = ^[^\[]*\[({DATE}) +datepattern = ^[^\[]*(\[{DATE}\s*\]) {^LN-BEG} # DEV Notes: