search

diladele / webproxy

Web Filtering Proxy for Microsoft Windows is a web filtering proxy and secure web gateway for Microsoft Windows. It can decrypt HTTPS traffic, filter HTTP requests and responses and inspect contents of HTML pages. The product deployed as a network service in Microsoft Windows and is managed by using Microsoft Management Console.
https://webproxy.diladele.com/
5 stars 3 forks source link

Anyone can access web monitoring website? #236

Open tmann50 opened 3 years ago

tmann50 commented 3 years ago

It looks like anyone on the machine that the proxy is running on can access the monitoring portal, regardless of their user status.

Its accessible at 127.0.0.1:8000 or localhost:8000 on the machine by any user. Would it be possible to add authentication to this site?

ra-at-diladele-com commented 3 years ago

Yes it was supposed that for Windows Server machines only admins are able to login, thus if you are an admin there is nothing wrong is showing you the traffic monitor. But I will move this onto the next version list - maybe it is possible to use Negotiate auth there too.