Improve local IP detection

Signed-off-by: Côme Chilliet <come.chilliet@nextcloud.com>
nextcloud · Jun 27, 2022 · f1037b9 · f1037b9
1 parent 0fe7064
commit f1037b9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/lib/private/Http/Client/LocalAddressChecker.php b/lib/private/Http/Client/LocalAddressChecker.php
@@ -41,6 +41,12 @@ public function ThrowIfLocalIp(string $ip) : void {
 			throw new LocalServerException('Host violates local access rules');
 		}
 
+		$localIps = ['100.100.100.200'];
+		if ((bool)filter_var($ip, FILTER_VALIDATE_IP) && in_array($ip, $localIps)) {
+			$this->logger->warning("Host $ip was not connected to because it violates local access rules");
+			throw new LocalServerException('Host violates local access rules');
+		}
+
 		// Also check for IPv6 IPv4 nesting, because that's not covered by filter_var
 		if ((bool)filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6) && substr_count($ip, '.') > 0) {
 			$delimiter = strrpos($ip, ':'); // Get last colon