blob: a484f5c43610b1914722b539a7944023cdd84293 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
import ipaddress
from mitmproxy import ctx
class Block:
def load(self, loader):
loader.add_option(
"block_global", bool, True,
"""
Block connections from globally reachable networks, as defined in
the IANA special purpose registries.
"""
)
loader.add_option(
"block_private", bool, False,
"""
Block connections from private networks, as defined in the IANA
special purpose registries. This option does not affect loopback
addresses.
"""
)
def clientconnect(self, layer):
address = ipaddress.ip_address(layer.client_conn.address[0])
if isinstance(address, ipaddress.IPv6Address):
address = address.ipv4_mapped or address
ipa = ipaddress.ip_address(address)
if ipa.is_loopback:
return
if ctx.options.block_private and ipa.is_private:
ctx.log.warn("Client connection from %s killed by block_private" % address)
layer.reply.kill()
if ctx.options.block_global and ipa.is_global:
ctx.log.warn("Client connection from %s killed by block_global" % address)
layer.reply.kill()
|
