обновление: v1.2.3 - Стелс-режим для обхода 403 Forbidden (Header Spoofing & Cookie Translation)

This commit is contained in:
Petro1990 2026-03-13 18:48:01 +03:00
parent 6508edeff9
commit e1f36b9900
1 changed files with 21 additions and 7 deletions

28
rproxy
View File

@ -3,7 +3,7 @@
# Публикация локальных сервисов через SSH-туннели + nginx на VPS # Публикация локальных сервисов через SSH-туннели + nginx на VPS
# http://5.104.75.50:3000/Petro1990/rProxy # http://5.104.75.50:3000/Petro1990/rProxy
VERSION="1.2.2" VERSION="1.2.3"
CONF_DIR="/opt/etc/rproxy" CONF_DIR="/opt/etc/rproxy"
CONF_FILE="$CONF_DIR/rproxy.conf" CONF_FILE="$CONF_DIR/rproxy.conf"
SERVICES_DIR="$CONF_DIR/services" SERVICES_DIR="$CONF_DIR/services"
@ -487,15 +487,22 @@ server {
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade \$http_upgrade; proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_set_header Host "\$http_host";
proxy_set_header Origin "\$scheme://\$http_host"; # Стелс-режим: прикидываемся локальным запросом
proxy_set_header Referer "\$http_referer"; proxy_set_header Host "$t_host";
proxy_set_header Origin "http://$t_host";
proxy_set_header Referer "http://$t_host/";
proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme; proxy_set_header X-Forwarded-Proto \$scheme;
proxy_set_header X-Forwarded-Host \$http_host; proxy_set_header X-Forwarded-Host \$http_host;
proxy_set_header X-Forwarded-Port \$server_port; proxy_set_header X-Forwarded-Port \$server_port;
# Трансляция куки: меняем локальный IP обратно на домен в браузере
proxy_cookie_domain "$t_host" "\$host";
proxy_cookie_path / "/; SameSite=Lax"; proxy_cookie_path / "/; SameSite=Lax";
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
proxy_connect_timeout 60s; proxy_connect_timeout 60s;
proxy_send_timeout 60s; proxy_send_timeout 60s;
@ -519,15 +526,22 @@ server {
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade \$http_upgrade; proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_set_header Host "\$http_host";
proxy_set_header Origin "\$scheme://\$http_host"; # Стелс-режим: прикидываемся локальным запросом
proxy_set_header Referer "\$http_referer"; proxy_set_header Host "$t_host";
proxy_set_header Origin "http://$t_host";
proxy_set_header Referer "http://$t_host/";
proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme; proxy_set_header X-Forwarded-Proto \$scheme;
proxy_set_header X-Forwarded-Host \$http_host; proxy_set_header X-Forwarded-Host \$http_host;
proxy_set_header X-Forwarded-Port \$server_port; proxy_set_header X-Forwarded-Port \$server_port;
# Трансляция куки: меняем локальный IP обратно на домен в браузере
proxy_cookie_domain "$t_host" "\$host";
proxy_cookie_path / "/; SameSite=Lax"; proxy_cookie_path / "/; SameSite=Lax";
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
proxy_connect_timeout 60s; proxy_connect_timeout 60s;
proxy_send_timeout 60s; proxy_send_timeout 60s;