New BitNinja Agent Release 3.17.6: Improved IP Filtering and Malware Scan Coverage

BitNinja Linux Agent 3.17.6 improves compatibility across different firewall environments, preserves visitor-facing ports after CAPTCHA challenges, and expands malware scan coverage. The release is available through the FREQUENT and BETA update channels.

IP Filtering Compatibility

BitNinja now detects and caches whether the installed iptables binary supports the -w option with a seconds value. When the binary does not support that format, subsequent commands use -w without a duration, avoiding “Bad argument '5'” errors on older iptables versions.

UFW commands now include a runtime fallback when the installed UFW version does not support the comment argument. BitNinja retries those commands without the argument to improve compatibility across different system environments.

CAPTCHA HTTP Handling

BitNinja now correctly identifies and preserves visitor-facing origin ports after a CAPTCHA challenge. This includes ports such as cPanel’s 2083 port and helps prevent routing issues after the challenge.

DoS Detection Configuration

The Under Attack Mode functionality, including its configuration schema, worker logic, automatic off timer, and cloud persistence, has been removed.

DoS Detection configuration is now more intuitive, with limits that can be set on a per-port basis.

Malware Detection

Directories configured for active, inotify-based malware monitoring are now also included in the full scan process. This ensures that paths selected for active monitoring are covered during full scans as well.

WAF Pro

WAF Pro now uses 4096 Nginx worker connections by default.

Reliable Auto Update

BitNinja Reliable Auto Update 1.1.1 now automatically renews the access token after receiving a 401 Unauthorized response.

Changelog:

bitninja (3.17.6)

• IpFilter
  • Older iptables versions, before 1.6.0, accept the -w option but reject a seconds value, resulting in “Bad argument '5'” errors. BitNinja now detects and caches whether the current iptables binary supports -w SECONDS. If it does not, subsequent commands use -w without a duration.
  • BitNinja now detects whether the installed UFW version supports the comment argument. If it does not, commands automatically retry without the argument.
• CaptchaHttp
  • Visitor-facing origin ports, such as cPanel’s 2083 port, are correctly identified and preserved after a CAPTCHA challenge.
• DosDetection
  • Removed Under Attack Mode functionality, including its configuration schema, worker logic, automatic off timer, and cloud persistence.
  • Updated configuration management so limits can be set on a per-port basis.
• MalwareDetection
  • Directories configured for active, inotify-based malware monitoring are now included in the full scan process.
• WAF Pro
  • Increased the default number of WAF Pro Nginx worker connections to 4096.
• Bitninja Reliable Auto Update - 1.1.1
  • Automatically renews the access token after a 401 Unauthorized response.

To ensure you’re running the latest version, check your update channel settings in the BitNinja Console using RAU. If you have specific configurations or applications preventing automatic updates, please refer to our documentation for instructions on manual updates and RAU configuration.

If you'd like to read more about previous releases, check the Changelog anytime.

Alternatively, if you would like to see your feature request show up here, don't forget to cast your vote.