跳至內容
使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post
關於 re:Post

AWS WAF Rate-Based Rule - How to permanently block offending IP addresses?

0

Hi all,

I would like to hear your approaches when applying a rate-based rule via AWS WAF.

What are the best ways to permanently block IP addresses that trigger the RBR? I would also like to send notification to our internal team that:

  1. The rule has been triggered
  2. List the IP (or IPs) that have been blocked

Thanks!

  • Oleksii Bebych 專家
    2 年前

    please accept the answer if it was useful

主題
安全性、身分識別與合規網路與內容傳遞AWS 架構完善的框架
標籤
AWS WAFDDOS 防護網路與內容傳遞安全
語言
English

已提問 2 年前檢視次數 1395 次

2 個答案
1

look at this blog https://aws.amazon.com/blogs/networking-and-content-delivery/configure-block-duration-for-ips-rate-limited-by-aws-waf/

專家

已回答 2 年前

  • Adrian Keith
    2 年前

    Hi Oleksii, I appreciate the reply, however, in the Solution Overview & Architecture section, it refers to a minimum block period. I would like for it to be permanent until someone reviews it and removes it intentionally. I would be concerned if the same IP is compromised again in the near or long term.

    "It blocks the IP addresses blocked by a rate-based rule for a configurable time period. Minimum supported block period is 6 minutes.

0

Hi Adrian, If your requirement is block specific ip permanently, create an ip set steps: Here and create a new Web ACL/ Rules / "Add my own rules and rule groups” select the IP Set, Source IP Address, Action->Block and save, steps: Here.

AWS

已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

相關內容