Post

Anubis v1.27.0 is out! anubis.techaro.lol/blog/release...

BREAKING CHANGE: Anubis renames cookies based on settings. Doing this prevents infinite challenge loops when cookie settings change. If this becomes a problem in practice for admins that have to assume the cookie name, we'll add a disable lever to the mix.

FEATURE: Anubis works on Windows Server with native .msi packaging. Try it and let us know how it works!

FEATURE: The honeypot feature (like iocaine but built into Anubis) can log IP addresses to a file. This file is reset every time it gets over 64Ki, so it doesn't become infinitely large.

FEATURE: Import an entire folder of configurations at once with wildcard matching. Import /etc/anubis/common-rules/*.yaml. What could go wrong?

FEATURE: The Portugese web archive arquivo.pt is now allowed through Anubis by default. They are the Portugese equivalent to the Internet Archive. We value archival at Techaro and you should too.

FIX: Alibaba Cloud, Googlebot, DuckDuckBot, and Huawei Cloud IP lists are updated. FIX: The AI-robots.txt rule was updated to match version 1.47.

FIX: Anubis no longer panics when receiving requests for Accept-Language: und. FIX: JavaScript served by the `fast` challenge is loaded using `defer` instead of `async`, making challenge page logic load consistently on German train wifi.

FIX: The iplist2rule tool now allows importing Google-style JSON IP feeds. FIX: Added rules to allow Dillo through Anubis so they don't have to write a challenge solver anymore. i18n: Basque, Bulgarian, and Croatian now have better support in Anubis.

FIX: Lightpanda is properly blocked again after they changed their User-Agent string to evade our previous block. A CI smoke test was added to ensure this does not repeat.

FIX: Enabled the partitioned flag on cookies by default. This makes Vanadium and other paranoid forks of Google Chrome work consistently with Anubis' first-party cookies.

Let us know how this works for you! We're going to be picking up the pace on Anubis development going forward. Contributing to the project financially means it can be better for everyone: github.com/sponsors/Xe