Any thoughts on removing (in 1469 or later - scope creep bad!)
fproxy.allowedHosts? Not to be confused with
fproxy.allowedHostsFullAccess, this is a list of IPs / netmasks outside
of which FProxy closes the connection immediately after accepting it. [0]

Why does the functionality exist? This seems like a confusing way to
poorly reimplement a firewall's job. Unlike fullAccessHosts which will
respond with a 403, the user gets no feedback.

The motivation for this is twofold - if a feature is useless it should
probably be removed, and it cost jeffpc and I two hours to figure out
why FProxy was immediately closing connections when he had added 0.0.0.0
intending it to mean all addresses.

- Steve

[0]
https://github.com/freenet/fred/blob/next/src/freenet/io/NetworkInterface.java#L397

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Devl mailing list
[email protected]
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to