At BitNinja, we continuously strive to keep our security solutions robust and flexible. In our latest release, version 3.16.9, we introduce exciting new features that enhance the flexibility and performance of our services. This release focuses on upgrades to WAF Pro and the SenseLog module, which make security management more efficient and adaptable. These updates enhance your server security by providing more control over SSL certificates and improving detection capabilities for brute-force attempts.

BitNinja 3.16.9

WAF Pro Enhancements:

We’ve integrated new settings into the WAF Pro Transparent Proxy configuration schema with the introduction of proxy_buffer_size and proxy_busy_buffers_size. These changes provide users more control over data processing and resource allocation, enhancing the proxy's efficiency.

New custom SSL certificate mapping feature: Users now have the flexibility to manually manage SSL certificates for domains within WAF Pro. This is facilitated by new CLI commands --add-cert and --del-cert, allowing for easy addition and removal of certificates, which offers a simplified way to handle user-specific certificates effectively.

Additionally, the caching system inside Coraza-Caddy now manages WAF instances based on directive string hash. This update improves system efficiency but requires consideration that content updates alone will not trigger file reloads.

SenseLog Enhancements:

The update revises the Postfix login detector to utilize the correct rule ID and reduces the maximum allowed SMTP login retries. This improvement intensifies the detection precision of brute-force attacks, thereby fortifying your server’s defenses against unauthorized access attempts.

Service Management:

In an effort to preserve user preferences, the BitNinja service will no longer restart unconditionally after a package upgrade. This change ensures that the service state remains unchanged by the upgrade process, maintaining user-defined settings efficiently.

Changelog:

• WAF Pro
  • Introduction of proxy_buffer_size and proxy_busy_buffers_size in configuration.
  • Addition of custom SSL certificate mapping, new CLI commands for certificate management.
  • Improved caching system using directive string hash inside Coraza-Caddy.
• SenseLog
  • Updated Postfix login detector to ensure accurate brute-force attempt detection by using correct rule ID.
• Service Management
  • Update prevents unconditional restart of BitNinja service post-upgrade, reflecting user-triggered states.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.