You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@nutch.apache.org by "Sebastian Nagel (Jira)" <ji...@apache.org> on 2022/06/23 08:50:00 UTC
[jira] [Assigned] (NUTCH-2930) Protocol-okhttp: implement IP filter
[ https://issues.apache.org/jira/browse/NUTCH-2930?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sebastian Nagel reassigned NUTCH-2930:
--------------------------------------
Assignee: Sebastian Nagel
> Protocol-okhttp: implement IP filter
> ------------------------------------
>
> Key: NUTCH-2930
> URL: https://issues.apache.org/jira/browse/NUTCH-2930
> Project: Nutch
> Issue Type: Improvement
> Components: plugin, protocol, security
> Affects Versions: 1.18
> Reporter: Sebastian Nagel
> Assignee: Sebastian Nagel
> Priority: Major
> Fix For: 1.19
>
>
> In order to avoid information leakage to a public search index or web archive, it should be possible to configure Nutch in a way that no content is fetched from localhost, loop-back addresses, private address spaces.
> NUTCH-2527 adds the configuration snippets to exclude URLs pointing to private addresses.
> However, filtering URLs isn't enough because a DNS entry of an arbitrary host name may point to a private IP address. Blocking must happen on the protocol level because the IP address is only know in the protocol implementation. I'll add an implementation for protocol-okhttp.
--
This message was sent by Atlassian Jira
(v8.20.7#820007)