diff options
Diffstat (limited to 'mitmproxy/addons/block.py')
| -rw-r--r-- | mitmproxy/addons/block.py | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/mitmproxy/addons/block.py b/mitmproxy/addons/block.py new file mode 100644 index 00000000..a484f5c4 --- /dev/null +++ b/mitmproxy/addons/block.py @@ -0,0 +1,37 @@ +import ipaddress +from mitmproxy import ctx + + +class Block: + def load(self, loader): + loader.add_option( + "block_global", bool, True, + """ + Block connections from globally reachable networks, as defined in + the IANA special purpose registries. + """ + ) + loader.add_option( + "block_private", bool, False, + """ + Block connections from private networks, as defined in the IANA + special purpose registries. This option does not affect loopback + addresses. + """ + ) + + def clientconnect(self, layer): + address = ipaddress.ip_address(layer.client_conn.address[0]) + if isinstance(address, ipaddress.IPv6Address): + address = address.ipv4_mapped or address + + ipa = ipaddress.ip_address(address) + if ipa.is_loopback: + return + + if ctx.options.block_private and ipa.is_private: + ctx.log.warn("Client connection from %s killed by block_private" % address) + layer.reply.kill() + if ctx.options.block_global and ipa.is_global: + ctx.log.warn("Client connection from %s killed by block_global" % address) + layer.reply.kill()
\ No newline at end of file |