byreqz/probehost2
1
0
Fork 0
mirror of https://github.com/byReqz/probehost2.git synced 2024-11-24 15:34:54 +00:00
Code Issues Projects Releases Wiki Activity

disable private range lookups by default

Browse Source
This commit is contained in:
Nils 2022-01-01 22:24:27 +01:00
parent c328205a12
commit bc827f5a8d
Signed by: byreqz
GPG Key ID: 396A62D7D436749E
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
main.go
View File

@ -17,12 +17,14 @@ var logfile = log.New()
var listenport int var listenport int
var disablexforwardedfor bool var disablexforwardedfor bool
var allowprivate bool
func init() { func init() {
var logfilepath string var logfilepath string
flag.StringVarP(&logfilepath, "logfilepath", "o","probehost2.log", "sets the output file for the log") flag.StringVarP(&logfilepath, "logfilepath", "o","probehost2.log", "sets the output file for the log")
flag.IntVarP(&listenport, "port", "p", 8000, "sets the port to listen on") flag.IntVarP(&listenport, "port", "p", 8000, "sets the port to listen on")
flag.BoolVarP(&disablexforwardedfor, "disable-x-forwarded-for", "x", false, "specifies whether to show x-forwarded-for or the requesting IP") flag.BoolVarP(&disablexforwardedfor, "disable-x-forwarded-for", "x", false, "whether to show x-forwarded-for or the requesting IP")
flag.BoolVarP(&allowprivate, "allow-private", "l", false, "whether to show lookups of private IP ranges")
flag.Parse() flag.Parse()
logstdout.SetFormatter(&log.TextFormatter{ logstdout.SetFormatter(&log.TextFormatter{
@ -68,8 +70,12 @@ func runner(remoteip string, command string, args... string) string{
func validatehosts(hosts []string) []string{ func validatehosts(hosts []string) []string{
var valid []string var valid []string
for _, host := range hosts { for _, host := range hosts {
if net.ParseIP(host) != nil { if hostparse := net.ParseIP(host); hostparse != nil {
valid = append(valid, host) if (net.IP.IsPrivate(hostparse) || net.IP.IsLoopback(hostparse)) && allowprivate {
valid = append(valid, host)
} else if ! (net.IP.IsPrivate(hostparse) || net.IP.IsLoopback(hostparse)) {
valid = append(valid, host)
}
} else if _, err := net.LookupIP(host); err == nil { } else if _, err := net.LookupIP(host); err == nil {
valid = append(valid, host) valid = append(valid, host)
} }