YGGverse/agate
1
0
Fork 0
mirror of https://github.com/YGGverse/agate.git synced 2026-04-08 12:35:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add an option to disable the port check

Browse source
This commit is contained in:
dece 2021-06-11 02:24:17 +02:00
parent 64878fd433
commit 2f52157c73
1 changed files with 14 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

18
src/main.rs
View file

@ -82,6 +82,7 @@ struct Args {
log_ips: bool, log_ips: bool,
only_tls13: bool, only_tls13: bool,
central_config: bool, central_config: bool,
skip_port_check: bool,
} }
fn args() -> Result<Args> { fn args() -> Result<Args> {
@ -140,6 +141,11 @@ fn args() -> Result<Args> {
"ed25519", "ed25519",
"Generate keys using the Ed25519 signature algorithm instead of the default ECDSA.", "Generate keys using the Ed25519 signature algorithm instead of the default ECDSA.",
); );
opts.optflag(
"",
"skip-port-check",
"Skip URL port check even when a hostname is specified.",
);
let matches = opts.parse(&args[1..]).map_err(|f| f.to_string())?; let matches = opts.parse(&args[1..]).map_err(|f| f.to_string())?;
@ -263,6 +269,7 @@ fn args() -> Result<Args> {
log_ips: matches.opt_present("log-ip"), log_ips: matches.opt_present("log-ip"),
only_tls13: matches.opt_present("only-tls13"), only_tls13: matches.opt_present("only-tls13"),
central_config: matches.opt_present("central-conf"), central_config: matches.opt_present("central-conf"),
skip_port_check: matches.opt_present("skip-port-check"),
}) })
} }
@ -413,10 +420,13 @@ impl RequestHandle {
} }
// correct port // correct port
if let Some(port) = url.port() { if !ARGS.skip_port_check {
// Validate that the port in the URL is the same as for the stream this request came in on. if let Some(port) = url.port() {
if port != self.stream.get_ref().0.local_addr().unwrap().port() { // Validate that the port in the URL is the same as for the stream this request
return Err((53, "proxy request refused")); // came in on.
if port != self.stream.get_ref().0.local_addr().unwrap().port() {
return Err((53, "Proxy request refused"));
}
} }
} }
Ok(url) Ok(url)