Comments (7)
@Aedaeum my only concern is making any assumptions about how an IP should be handled. I agree with you that it would make sense that if you had the one, just honor the other, but if that created an issue for someone else and they weren't expecting it, that would seem to be worse than having to add both the IPv4 and IPv6 addresses.
from express-ipfilter.
+1
from express-ipfilter.
I just merged #44 which should fix this problem. If you are still having issues with the new version, feel free to reopen.
from express-ipfilter.
@ryanbillingsley This fixes the overall issue, but does not resolve the ::1
IP reserved for localhost connections. You'll notice in my code example, I converted it to its proper IP address.
from express-ipfilter.
@Aedaeum you can't just add ::1
to your list of IPs?
from express-ipfilter.
@ryanbillingsley Yes, I can. I just figured it would be more intuitive from a programming perspective to have 127.0.0.1
handle all localhost connections.
edit Without digging into the IPs, I didn't realize myself that ::1
was localhost, so I imagine other people will have this same issue.
from express-ipfilter.
@ryanbillingsley I agree with that. I'm not sure about the ramifications either.
from express-ipfilter.
Related Issues (20)
- improve filter ranges with dash notation HOT 3
- This could be easily bypassed HOT 4
- How about using res.send() instead of res.end()
- 0.1.0 introduced localhost issue HOT 4
- Support for logging only denials HOT 2
- deprecated express function in example
- Not blocking requests from "unallowed" CIDR addresses HOT 5
- The middleware when deny a request crash the server HOT 7
- Multiple x-forwarded-for IPs HOT 6
- Logging excluded paths
- I would like to be able to update the ip list of excluded ips
- Problem when testing for IP addresses that come with a port? HOT 3
- Allow `ipfilter` to take a function that returns either a single IP or an array of IPs HOT 1
- Problem with ip module requires change of recent pull request HOT 1
- Error on Access Denied HOT 2
- Update IP block list HOT 2
- No typescript definitions available
- Dependency on lodash 3, which suffers from security vulnerabilities HOT 1
- Move default getClientIp to use proxy-addr, just like express does.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from express-ipfilter.