github/torrentpier
1
0
Fork 0
mirror of https://github.com/torrentpier/torrentpier synced 2025-08-20 13:24:01 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

feat(announcer): Added some disallowed ports by default (#1767)

Browse source 
* feat(announcer): Added some disallowed ports by default

* Update announce.php
This commit is contained in:
Roman Kelesidis 2025-01-16 16:29:04 +03:00 • committed by GitHub
commit 46288ec198
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 20 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
bt/announce.php
View file

@ -128,7 +128,9 @@ if (
!isset($port) !isset($port)
|| !is_numeric($port) || !is_numeric($port)
|| ($port < 1024 && !$stopped) || ($port < 1024 && !$stopped)
|| $port > 0xFFFF) { || $port > 0xFFFF
|| (!empty($bb_cfg['disallowed_ports']) && in_array($port, $bb_cfg['disallowed_ports']))
) {
msg_die('Invalid port: ' . $port); msg_die('Invalid port: ' . $port);
} }

17
library/config.php
View file

@ -98,6 +98,23 @@ $bb_cfg['passkey_key'] = 'uk'; // Passkey key name in GET request
$bb_cfg['ignore_reported_ip'] = false; // Ignore IP reported by client $bb_cfg['ignore_reported_ip'] = false; // Ignore IP reported by client
$bb_cfg['verify_reported_ip'] = true; // Verify IP reported by client against $_SERVER['HTTP_X_FORWARDED_FOR'] $bb_cfg['verify_reported_ip'] = true; // Verify IP reported by client against $_SERVER['HTTP_X_FORWARDED_FOR']
$bb_cfg['allow_internal_ip'] = false; // Allow internal IP (10.xx.. etc.) $bb_cfg['allow_internal_ip'] = false; // Allow internal IP (10.xx.. etc.)
$bb_cfg['disallowed_ports'] = [
// https://github.com/HDInnovations/UNIT3D-Community-Edition/blob/c64275f0b5dcb3c4c845d5204871adfe24f359d6/app/Http/Controllers/AnnounceController.php#L53
// Hyper Text Transfer Protocol (HTTP) - port used for web traffic
8080,
8081,
// Kazaa - peer-to-peer file sharing, some known vulnerabilities, and at least one worm (Benjamin) targeting it.
1214,
// IANA registered for Microsoft WBT Server, used for Windows Remote Desktop and Remote Assistance connections
3389,
// eDonkey 2000 P2P file sharing service. http://www.edonkey2000.com/
4662,
// Gnutella (FrostWire, Limewire, Shareaza, etc.), BearShare file sharing app
6346,
6347,
// Port used by p2p software, such as WinMX, Napster.
6699,
];
$bb_cfg['client_ban'] = [ $bb_cfg['client_ban'] = [
'enabled' => false, 'enabled' => false,
'only_allow_mode' => false, 'only_allow_mode' => false,