diff options
author | Jo-Philipp Wich <jow@openwrt.org> | 2010-08-11 00:05:34 +0000 |
---|---|---|
committer | Jo-Philipp Wich <jow@openwrt.org> | 2010-08-11 00:05:34 +0000 |
commit | 3d99f030820877eb84835fb1be66a7db3f5b0c68 (patch) | |
tree | ab165f9195ca06e8c8b635f0edce60ce30c5a706 /package/uhttpd/files/uhttpd.config | |
parent | a5371dfe3909f14d45803efcfa5a85446f7954ac (diff) | |
download | mtk-20170518-3d99f030820877eb84835fb1be66a7db3f5b0c68.zip mtk-20170518-3d99f030820877eb84835fb1be66a7db3f5b0c68.tar.gz mtk-20170518-3d99f030820877eb84835fb1be66a7db3f5b0c68.tar.bz2 |
uhttpd: add option to reject requests from RFC1918 IPs to public server IPs (DNS rebinding countermeasure)
SVN-Revision: 22589
Diffstat (limited to 'package/uhttpd/files/uhttpd.config')
-rw-r--r-- | package/uhttpd/files/uhttpd.config | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/package/uhttpd/files/uhttpd.config b/package/uhttpd/files/uhttpd.config index acdd62e..534e8f8 100644 --- a/package/uhttpd/files/uhttpd.config +++ b/package/uhttpd/files/uhttpd.config @@ -12,6 +12,11 @@ config uhttpd main # Server document root option home /www + # Reject requests from RFC1918 IP addresses + # directed to the servers public IP(s). + # This is a DNS rebinding countermeasure. + option rfc1918_filter 1 + # Certificate and private key for HTTPS. # If no listen_https addresses are given, # the key options are ignored. |