ips (v4|v6) which should be exempted for the rate-limit

[un99known99]

Describe the problem/question

is there also a dyndns or myfritz address supported like:
exemptedIp = '192.168.178.1/24,asfsdfsdfaasdfasdfsdf.myfritz.net,example.dedyn.io' ?

Did you use the FAQ section?

• Yes, I have read the FAQ and I found no solution/answer there.

What you did?

...

What happens

No response

What should happen

No response

Additional information

No response

Server address

No response

Server OS

No response

Webserver

No response

PrivateBin version

No response

Browser and version

No response

Local operating system and version

No response

Issue reproducibility

No, I cannot reproduce it on https://privatebin.net.

[rugk]

See this guide for how to configure the trafficlimit: https://github.com/PrivateBin/PrivateBin/wiki/Configuration#trafficlimit

E.g. the entry is called exempted and not exemptedIp. You can only configure IPs and not hostnames as service only gets the IP and a hostname would require some kind of reverse DNS request.
This is mostly useful for excluding local IPs or so, which are static anyway.

If you did so, please describe what you actually want to do in more detail, then maybe someone can help.
Also, why you want to exclude such a hostname in the first place. Note it is just the traffic limiter and one should hope you don't run into that too often.

[un99known99]

@rugk thanks for your reply.
My use case is to whitelist "changing IPs" / DynDNS hostnames, I want to whitelist e.g. a myfritz.net DynDNS or desec.io, setup for me atm:
exemptedIp = '192.168.178.1/24, sdfsdfsdfsfsfmd.myfritz.net, example.dedyn.io'
This is similar to local IPs but access the public privatebin from internal (via dyn IP address).
But if I get you, this only affects traffic?
If so, to protect, is there alternatively a fail2ban filter to be setup?

[rugk]

You could alos white-list whole IP ranges as a workaround but as said the real question to ask is: why do you want this?

It's just a traffic limiter. It limits just that your service cannot be easily dosed/spammed with new pastes.

Of course you can also disable the limit or set it very low and then setup an alternative security mechanism using fail2ban. Sure.

[un99known99]

@rugk thanks for your reply, I think for the use case fail2ban might be the way to go ... need to see if I can set up a filter. By any chance, there is no such demo filter provided by your project?

[rugk]

Not that i know of. Also no issues mention it, so if you want to go ahead, do so! You have the chance to be the first to provide it here. 😉