MINOR: http-rules: Support an optional status on deny rules for http reponses
It is now possible to specified the status code to return an http-response deny
rules. For instance :
http-response deny deny_status 500
diff --git a/src/http_act.c b/src/http_act.c
index 9907425..9123a7f 100644
--- a/src/http_act.c
+++ b/src/http_act.c
@@ -835,8 +835,34 @@
static enum act_parse_ret parse_http_res_deny(const char **args, int *orig_arg, struct proxy *px,
struct act_rule *rule, char **err)
{
- rule->action = ACT_ACTION_DENY;
+ int code, hc, cur_arg;
+
+ cur_arg = *orig_arg;
+ rule->action = ACT_ACTION_DENY;;
+ rule->arg.http.i = HTTP_ERR_502;
rule->flags |= ACT_FLAG_FINAL;
+
+ if (strcmp(args[cur_arg], "deny_status") == 0) {
+ cur_arg++;
+ if (!*args[cur_arg]) {
+ memprintf(err, "missing status code.\n");
+ return ACT_RET_PRS_ERR;
+ }
+
+ code = atol(args[cur_arg]);
+ cur_arg++;
+ for (hc = 0; hc < HTTP_ERR_SIZE; hc++) {
+ if (http_err_codes[hc] == code) {
+ rule->arg.http.i = hc;
+ break;
+ }
+ }
+ if (hc >= HTTP_ERR_SIZE)
+ memprintf(err, "status code %d not handled, using default code %d",
+ code, http_err_codes[rule->arg.http.i]);
+ }
+
+ *orig_arg = cur_arg;
return ACT_RET_PRS_OK;
}
diff --git a/src/http_ana.c b/src/http_ana.c
index 628116d..574f6eb 100644
--- a/src/http_ana.c
+++ b/src/http_ana.c
@@ -3073,7 +3073,7 @@
case ACT_ACTION_DENY:
txn->flags |= TX_CLDENY;
- txn->status = 502;
+ txn->status = http_err_codes[rule->arg.http.i];
rule_ret = HTTP_RULE_RES_DENY;
goto end;