Rule 21 is triggered with valid IPv6

[Are-xi]

当请求的地址时ipv6格式时，id为21的内部规则会拦截

 [error] 5921#5921: *289 NAXSI_FMT: ip=fd15:4ba5:5a2b:1888::1&server=[fd15:4ba5:5a2b:1008:20c:29ff:fe65:b111]&uri=/111/&config=learning-drop&rid=eaa59b20d4094a29b0b0098a141658bc&zone0=HEADERS&id0=21&var_name0=, client: fd15:4ba5:5a2b:1888::1, server: _, request: "GET /111/ HTTP/1.1", host: "[fd15:4ba5:5a2b:1008:20c:29ff:fe65:b111]:98"

---

When the requested address is ipv6 formatted, the internal rule of id of 21 is intercepted.

[wargio]

Yes indeed, it seems that is triggering the rule incorrectly. you can whitelist the rule globally as workaround.

MainRule wl:21;

[wargio]

Can you craft a curl (or raw http) request which i can use for testing purposes?

[Are-xi]

If the whitelist method is added, the host's verification will be completely lost, which is unsafe; Is there an alternative solution, such as how to add a new rule to replace 21, which can fully apply the content of rule 21 and also be applicable to IPv6

[Are-xi]

Currently, there is no IPv6 address that can be provided to you

[wargio]

I don't think is a problem if for now you whitelist rule 21 globally -> https://wargio.github.io/naxsi/internal_rules.html#internal-rule-21---illegal-host-in-header
The rule itself is kinda simple and was a recent addition.