scrapoxy
scrapoxy copied to clipboard
fabienvauchelles
There is no auth on the instance
See https://github.com/fabienvauchelles/scrapoxy/blob/master/tools/install/proxy.js
=> The Authorization Check on headers is missing !
My hosting provider (OVH) has blocked external traffic on port 25 on proxy VMs as they were sending a massive amount of spam (hacked I suppose). I think it may be related to missing auth, no ?
Ok. I could add a default password, which can be changed.
What do you think @anisgandoura ?
I see 3 possibilities:
- Use a default password that can be changed as you suggest
- Use an already shared info between the proxy and the handler. I only used OVH for scrapoxy but I noticed that the API key was known by both machines. In this case, we can use the hash as a password for example but I don’t know if this method can be replicated for other hosting providers.
- Use an IP filter. We can only allow traffic asked by specific addresses (in a array, a white list). When the proxy VM starts, it can automatically add the IP performing the first request (the handler) to its white list. After that, it will check if the IP is in the white list or not.
Personally, I prefer the 3rd option as it does not require additional manual config for the user and is pretty straightforward to implement.
Hey there! 🌟 Exciting news! Scrapoxy 4 is ready to rock 🚀. Check it out at Scrapoxy.io (explore the "get started" guide, deployment documentation, and more 📚). I can't wait to hear your feedback on this new version! Send me your coolest screenshots with as many proxies as possible! 📸💻 Join the Discord community if you have any questions or just want to chat. You can also open a GitHub issue for any bug or feature request 🐞✨. See you soon! 😎 Fabien