обновление: v1.2.3 - Стелс-режим для обхода 403 Forbidden (Header Spoofing & Cookie Translation)
This commit is contained in:
parent
6508edeff9
commit
e1f36b9900
28
rproxy
28
rproxy
|
|
@ -3,7 +3,7 @@
|
||||||
# Публикация локальных сервисов через SSH-туннели + nginx на VPS
|
# Публикация локальных сервисов через SSH-туннели + nginx на VPS
|
||||||
# http://5.104.75.50:3000/Petro1990/rProxy
|
# http://5.104.75.50:3000/Petro1990/rProxy
|
||||||
|
|
||||||
VERSION="1.2.2"
|
VERSION="1.2.3"
|
||||||
CONF_DIR="/opt/etc/rproxy"
|
CONF_DIR="/opt/etc/rproxy"
|
||||||
CONF_FILE="$CONF_DIR/rproxy.conf"
|
CONF_FILE="$CONF_DIR/rproxy.conf"
|
||||||
SERVICES_DIR="$CONF_DIR/services"
|
SERVICES_DIR="$CONF_DIR/services"
|
||||||
|
|
@ -487,15 +487,22 @@ server {
|
||||||
proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
proxy_set_header Upgrade \$http_upgrade;
|
proxy_set_header Upgrade \$http_upgrade;
|
||||||
proxy_set_header Connection "upgrade";
|
proxy_set_header Connection "upgrade";
|
||||||
proxy_set_header Host "\$http_host";
|
|
||||||
proxy_set_header Origin "\$scheme://\$http_host";
|
# Стелс-режим: прикидываемся локальным запросом
|
||||||
proxy_set_header Referer "\$http_referer";
|
proxy_set_header Host "$t_host";
|
||||||
|
proxy_set_header Origin "http://$t_host";
|
||||||
|
proxy_set_header Referer "http://$t_host/";
|
||||||
|
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_set_header X-Forwarded-Host \$http_host;
|
proxy_set_header X-Forwarded-Host \$http_host;
|
||||||
proxy_set_header X-Forwarded-Port \$server_port;
|
proxy_set_header X-Forwarded-Port \$server_port;
|
||||||
|
|
||||||
|
# Трансляция куки: меняем локальный IP обратно на домен в браузере
|
||||||
|
proxy_cookie_domain "$t_host" "\$host";
|
||||||
proxy_cookie_path / "/; SameSite=Lax";
|
proxy_cookie_path / "/; SameSite=Lax";
|
||||||
|
|
||||||
proxy_hide_header X-Frame-Options;
|
proxy_hide_header X-Frame-Options;
|
||||||
proxy_connect_timeout 60s;
|
proxy_connect_timeout 60s;
|
||||||
proxy_send_timeout 60s;
|
proxy_send_timeout 60s;
|
||||||
|
|
@ -519,15 +526,22 @@ server {
|
||||||
proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
proxy_set_header Upgrade \$http_upgrade;
|
proxy_set_header Upgrade \$http_upgrade;
|
||||||
proxy_set_header Connection "upgrade";
|
proxy_set_header Connection "upgrade";
|
||||||
proxy_set_header Host "\$http_host";
|
|
||||||
proxy_set_header Origin "\$scheme://\$http_host";
|
# Стелс-режим: прикидываемся локальным запросом
|
||||||
proxy_set_header Referer "\$http_referer";
|
proxy_set_header Host "$t_host";
|
||||||
|
proxy_set_header Origin "http://$t_host";
|
||||||
|
proxy_set_header Referer "http://$t_host/";
|
||||||
|
|
||||||
proxy_set_header X-Real-IP \$remote_addr;
|
proxy_set_header X-Real-IP \$remote_addr;
|
||||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||||
proxy_set_header X-Forwarded-Host \$http_host;
|
proxy_set_header X-Forwarded-Host \$http_host;
|
||||||
proxy_set_header X-Forwarded-Port \$server_port;
|
proxy_set_header X-Forwarded-Port \$server_port;
|
||||||
|
|
||||||
|
# Трансляция куки: меняем локальный IP обратно на домен в браузере
|
||||||
|
proxy_cookie_domain "$t_host" "\$host";
|
||||||
proxy_cookie_path / "/; SameSite=Lax";
|
proxy_cookie_path / "/; SameSite=Lax";
|
||||||
|
|
||||||
proxy_hide_header X-Frame-Options;
|
proxy_hide_header X-Frame-Options;
|
||||||
proxy_connect_timeout 60s;
|
proxy_connect_timeout 60s;
|
||||||
proxy_send_timeout 60s;
|
proxy_send_timeout 60s;
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue