Struct Policy 

pub struct Policy { /* private fields */ }

The destination rules in force for a connection.

Implementations

impl Policy

pub fn new(security: &Security) -> Self

Builds the policy described by the [security] section.

pub fn allows_port(&self, port: u16) -> bool

Whether a target port may be reached at all.

Checked before name resolution: it needs no address, and refusing early means a denied port cannot be used to make the proxy run DNS lookups.

pub fn allows_address(&self, ip: IpAddr) -> bool

Whether one resolved address may be dialled.

pub fn allowed_addresses(&self, addresses: &[SocketAddr]) -> Vec<SocketAddr>

The subset of addresses this proxy may dial.

A name that resolves to both a public and a private address keeps only the public ones, which is what makes DNS rebinding onto loopback pointless.