Options to only allow specific IP address to upload #260

Closed
opened 2026-01-19 18:29:38 +00:00 by michael · 6 comments
Owner

Originally created by @misaka00251 on GitHub.

Or something like whitelist / blacklist feature? Because when it comes to self-hosted, abuse is a big problem.

Originally created by @misaka00251 on GitHub. Or something like whitelist / blacklist feature? Because when it comes to self-hosted, abuse is a big problem.
Author
Owner

@paolafrancesca commented on GitHub:

there are --http-auth-user and --http-auth-pass that will add http basic auth for a single account only on upload, can this solve your issue?

a whitelist/blacklist feature could be useful anyway

@paolafrancesca commented on GitHub: there are `--http-auth-user` and `--http-auth-pass` that will add http basic auth for a single account only on upload, can this solve your issue? a whitelist/blacklist feature could be useful anyway
Author
Owner

@paolafrancesca commented on GitHub:

addressed in #224, please @misaka00251 test on that branch

I also switched to go module there

@paolafrancesca commented on GitHub: addressed in #224, please @misaka00251 test on that branch I also switched to go module there
Author
Owner

@paolafrancesca commented on GitHub:

@misaka00251 there's no sanitization of the input: so 2.2.2.2 will fail to be parsed because of the space in the beginning

@paolafrancesca commented on GitHub: @misaka00251 there's no sanitization of the input: so ` 2.2.2.2` will fail to be parsed because of the space in the beginning
Author
Owner

@misaka00251 commented on GitHub:

Well, I managed a private GitLab instance (for me and my friends) and have some shared GitLab runners (runners are on two different machines), and I only want these shared machines to use this service. Clearly here --http-auth-user and --http-auth-pass isn't a perfect solution, since it might get leaked...

@misaka00251 commented on GitHub: Well, I managed a private GitLab instance (for me and my friends) and have some shared GitLab runners (runners are on two different machines), and I only want these shared machines to use this service. Clearly here `--http-auth-user` and `--http-auth-pass` isn't a perfect solution, since it might get leaked...
Author
Owner

@misaka00251 commented on GitHub:

Tested and it works.
Issues:
Already set a list of IPs like --ip-whitelist="1.1.1.1, 2.2.2.2", but only 1.1.1.1 can access.

@misaka00251 commented on GitHub: Tested and it works. Issues: Already set a list of IPs like `--ip-whitelist="1.1.1.1, 2.2.2.2"`, but only `1.1.1.1` can access.
Author
Owner

@paolafrancesca commented on GitHub:

fixed

@paolafrancesca commented on GitHub: fixed
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dutchcoders/transfer.sh#260