BitNinja continues to enhance its security suite with the 3.16.5 release, aiming to provide reliable and user-centric solutions. This update introduces the integration of the WAF3 logic, replacing legacy systems, and configurable delist URLs for greater user control. These upgrades are designed to improve firewall management and user experience when dealing with CaptchaFTP and greylist functionalities.

BitNinja 3.16.5

WAF3 Integration:

The update adds WAF3-based implementation in csf.post.sh, superseding the previous ProxyFilter reload logic. This integration ensures consistent firewall reload behavior, aligning with the new WAF infrastructure for optimal security management.

Configurable Delist URLs:

The new release offers configurable delist URLs for CaptchaFTP and greylist flows. Users can now be redirected to appropriate self-service delist pages instead of a fixed destination, enhancing the customization and user-friendliness of BitNinja services.

iptables Rule Generation Fix:

There is a fix to iptables direct-access rule generation, ensuring correct structure and order. This correction boosts the reliability and accuracy of direct access handling, reducing misconfiguration risks.

Location Header Normalization:

We have standardized backend Location headers to address redirection issues. This normalization ensures that redirect responses function correctly behind proxies, preventing broken or malformed URLs for protected sites.

Changelog:

• WAF Integration
  • Replaced legacy ProxyFilter reload logic with WAF3 implementation in csf.post.sh.
• Delist URLs
  • Introduced configurable delist URLs for CaptchaFTP and greylist flows.
• iptables Configuration
  • Fixed generation of iptables direct-access rules to ensure correct structure and order.
• Redirect Handling
  • Normalized backend Location headers for correct redirect responses behind proxies.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.