fix: whitelist

This commit is contained in:
gVisor bot 2022-04-23 09:52:23 +08:00
parent 7cdbab467f
commit b5e7abfa15

View file

@ -46,14 +46,18 @@ func (sd *SnifferDispatcher) TCPSniff(conn net.Conn, metadata *C.Metadata) {
return
}
inWhitelist := false
for _, portRange := range *sd.portRanges {
if !portRange.Contains(uint16(port)) {
return
} else {
if portRange.Contains(uint16(port)) {
inWhitelist = true
break
}
}
if !inWhitelist {
return
}
if host, err := sd.sniffDomain(bufConn, metadata); err != nil {
log.Debugln("[Sniffer] All sniffing sniff failed with from [%s:%s] to [%s:%s]", metadata.SrcIP, metadata.SrcPort, metadata.String(), metadata.DstPort)
return