[WordPress] 外掛分享： Secure Owl Firewall

內容簡介

Secure Owl Firewall 是一款快速且輕量的防火牆外掛，具備先進的規則引擎，能有效防範各種網路攻擊，並提供靈活的規則設定與日誌管理功能，提升網站的安全性。

【主要功能】
• 100+ 預設規則，防範 SQLi、XSS 等攻擊
• URL 解碼、路徑正規化等轉換管道
• 支援 IPv4 和 IPv6 的 IP 白名單與黑名單
• 登入保護功能，防止暴力破解攻擊
• 可配置的日誌保留政策，符合 GDPR
• 每條規則可在控制台中單獨啟用或停用

外掛標籤

開發者團隊

原文外掛簡介

Secure Owl Firewall is a fast, lightweight firewall plugin with an advanced rule engine featuring PCRE pattern matching, a transformation pipeline, and JSON-based rule configuration.
Key features:

JSON-based rules — 100+ default rules covering SQLi, XSS, RCE, LFI, SSRF, Log4Shell, and more
Transformation pipeline — URL decode, lowercase, normalize path, remove whitespace, HTML entity decode, trim
Inspection targets — REQUEST_URI, QUERY_STRING, USER_AGENT, REFERER, COOKIE, and POST
MU-Plugin loader — runs before regular plugins for earliest protection
Rate limiting — optional transient-based IP and subnet banning
Login protection — PIN field, speed limit and honeypot to block brute-force attacks
IP whitelist — CIDR/subnet support for both IPv4 and IPv6
IP blacklist — CIDR/subnet support for both IPv4 and IPv6
Per-rule toggle — disable individual rules from the admin panel without editing files
File-based logging — 64MB cap with auto-rotation and protected storage
Log retention — configurable policy for GDPR compliance
IP anonymization — masks user IP addresses for enhanced privacy and GDPR compliance

Filter Hooks

sswaf_ip_whitelist — array of IPs to bypass the firewall
sswaf_ip_blacklist — array of IPs to block before any rules run
sswaf_trusted_proxies — array of trusted proxy IPs for X-Forwarded-For
sswaf_post_scanning — enable POST data inspection (default: true)
sswaf_rules_file — path to the rules JSON file
sswaf_log_file — path to the log file
sswaf_log_max_size — maximum log size in bytes
sswaf_header_status — HTTP status header for blocked requests
sswaf_before_block — action hook fired before blocking a request
sswaf_rate_limit_ip_threshold — override IP hit threshold
sswaf_rate_limit_ip_duration — override IP ban duration
sswaf_rate_limit_ip_window — override IP counting window

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是最受歡迎的 WordPress 安全防護外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)le Plugins include Complianz GDPR, Disable Updates Manage...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款多合一 WordPress 外掛，整合網站安全防護、自...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 可以讓你安心地在 WordPress 中上傳 SVG 檔案！ 它...LoginizerLoginizer 是一款 WordPress 安全防護外掛，主要用於阻擋暴力...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Reloaded 是一款強大的安全外掛，旨在...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role Editor「User Role Editor」WordPress 外掛讓您輕鬆更改使用者角色...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP Plugin版本: 1.6.7 您可以在日文網頁和英文網頁上找到文件、常見問...