Block certain URLs (like local IP-range) about php-proxy-app

[Athlon1600]

Something like that is definitely doable and is something I've been planing to build for a while. And I think now is the time to finally start working on it because otherwise people will start thinking that this project is dead when it isn't. I should have something by the end of the week so stay tuned.

[Athlon1600]

Here you go, finally finished:
https://github.com/Athlon1600/php-proxy/releases/tag/v5.0.4

Just run "composer update" to upgrade your php-proxy version to 5.0.4

[nonplusnl]

Thanks!!
A dumb question perhaps: how to use? I added BlockList to config.php plugin array, added $config['blocklist.ip_block'] = '192.168.178.*'; but it doesn't appear to work. With a wildcard, all sites get blocked. Without wildcard, the blocking doesn't work. What am I doing wrong?

[Athlon1600]

plugin itself was probably not enabled.

$config['plugins'] = array(

should have 'BlockListPlugin' in it.

[nonplusnl]

It’s probably me, but I don’t get it to work. This is the relevant excerpt from my config.php: [Other stuff deleted] // plugins to load - plugins will be loaded in this exact order as in array $config['plugins'] = array( 'HeaderRewrite', 'Stream', // ^^ do not disable any of the plugins above 'Cookie', 'Proxify', 'UrlForm', 'BlockList', // site specific plugins below 'Youtube', 'DailyMotion', 'RedTube', 'XHamster', 'XVideos', 'Twitter', ); $config['blocklist.ip_block'] = '192.168.178.1'; // this better be here other Config::load fails return $config; [End config] When I use this config, the IP mentioned does NOT get blocked. If I introduce a wildcard, e.g. 192.168.178.*, then everything (including e.g. GitHub.com) gets “Access denied”. Any ideas? Thanks! From: Athlon1600 Sent: 30 June 2017 16:45 To: Athlon1600/php-proxy-app Cc: nonplusnl; Author Subject: Re: [Athlon1600/php-proxy-app] Block certain URLs (like localIP-range) (#55) plugin itself was probably not enable. $config['plugins'] = array( should have 'BlockListPlugin' in it. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub, or mute the thread.

[Athlon1600]

192.168.178.1 is your LOCAL IP address. That's not the IP address that is seen from outside your local network. Go to https://www.whatismyip.com/ and use as your IP address.

[nonplusnl]

192.168.178.1 is the address of the router on the internal network. That is the address I wanted to block (among others on my internal network), because I consider it a security risk to have the local admin page of my router accessible via the proxy (which is accessible from the outside via my public IP). The server on which php-proxy is running, is 192.168.178.5 on the internal network (externally accessible as www.nonplus.nl/npp [3]). So I'd say that from the server's perspective, blocking of 192.168.178.1 should be a normal procedure, just like blocking whitehouse.gov or anything else?

On 03/07/2017 23:25, Athlon1600 wrote: 192.168.178.1 is your LOCAL IP address. That's not the IP address that is seen on the outside. Go to https://www.whatismyip.com/ and use as your IP address. -- You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub [1], or mute the thread [2].

Links: ------ [1] #55 (comment) [2] https://github.com/notifications/unsubscribe-auth/AUVP81V-vuUGxWjYd9uX7FHutzo2KALrks5sKVxdgaJpZM4NxtP6 [3] http://www.nonplus.nl/npp,

[Athlon1600]

Here is another option for you to try: Instead of "blocklist.ip_allow", use "blocklist.custom":

$config['blocklist.custom'] = function(){
     // I think this is how you get local IP
     // https://stackoverflow.com/questions/3219178/php-how-to-get-local-ip-of-system
     $local_ip = getHostByName(php_uname('n'));

    /// return false to BLOCK
    if($local_ip == '192.168.178.1'){
         return false;
    }
    return true;
}