From 7d8444c435afe73c4e337079c901e378b18e0430 Mon Sep 17 00:00:00 2001 From: Mark McDowall Date: Sat, 25 Oct 2025 19:18:43 -0700 Subject: [PATCH] Set known networks to RFC 1918 ranges during startup (cherry picked from commit d10107739b9ed6a50165e5dd1dfae15c7e8aea56) --- src/NzbDrone.Host/Startup.cs | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/src/NzbDrone.Host/Startup.cs b/src/NzbDrone.Host/Startup.cs index 265ba58bd5..587846fee0 100644 --- a/src/NzbDrone.Host/Startup.cs +++ b/src/NzbDrone.Host/Startup.cs @@ -1,6 +1,7 @@ using System; using System.Collections.Generic; using System.IO; +using System.Net; using DryIoc; using Microsoft.AspNetCore.Authorization; using Microsoft.AspNetCore.Builder; @@ -32,6 +33,7 @@ using Radarr.Http.ErrorManagement; using Radarr.Http.Frontend; using Radarr.Http.Middleware; +using IPNetwork = Microsoft.AspNetCore.HttpOverrides.IPNetwork; using LogLevel = Microsoft.Extensions.Logging.LogLevel; namespace NzbDrone.Host @@ -60,8 +62,9 @@ public void ConfigureServices(IServiceCollection services) services.Configure(options => { options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto | ForwardedHeaders.XForwardedHost; - options.KnownNetworks.Clear(); - options.KnownProxies.Clear(); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("10.0.0.0"), 8)); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("172.16.0.0"), 12)); + options.KnownNetworks.Add(new IPNetwork(IPAddress.Parse("192.168.0.0"), 16)); }); services.AddRouting(options => options.LowercaseUrls = true);