3 ms·

Does it have the same spam prevention policies as ngrok?

by lxe 3y ago

aussieguy1234 3y ago
In the early days there where several attempts to use Tunnelmole for phishing. When you think about it, a service that hides your IP under a domain that is not yours means you can do whatever you want without risking your own server or domain being taken down for abuse, instead risking my server. So I added code to forward an X-Forwarded-For header, which contains the real IP address of the client. Also random URLs have the ip address added to them.
- apitman 3y ago
  I know what the X-Forwarded-For is, but I'm confused by what you mean here. Can you go into a bit more detail as to what you implemented and how it prevents phishing?
  - aussieguy1234 3y ago
    It's a header that contains the IP address of the machine that ran the Tunnelmole client, which ensures it can't be used anonymously. My theory here is that phishers and other nefarious actors are attracted to this type of service so they can hide their origin server. I haven't had alot of phishing issues since introducing that header and the IP address in random domains. I'll see if I can get tunnelmole.net added to that public suffix list. One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain.
    - apitman 3y ago
      Interesting. I see what you mean by the random domains now. Creative idea! > One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain. Definitely recommend you keep it that way. There's not saying what various orgs will do. I believe at one point Facebook messenger blocked links to .xyz TLD domains entirely. Maybe they still do.
- russorat 3y ago
  PM from ngrok here. First, awesome project! Love to see new projects and ideas in the space. Fighting phishing (and other abuse) is a constant battle for us. As you may know, we do similar things to publish IP addresses, but we've had to add a bunch of other stuff to combat this over the years. I'm happy to share ideas and collaborate if you want to reach out. russ at ngrok dot com. Again, super awesome project and great work!

Does it have the same spam prevention policies as ngrok?

by lxe 3y ago

Does it have the same spam prevention policies as ngrok?

In the early days there where several attempts to use Tunnelmole for phishing. When you think about it, a service that hides your IP under a domain that is not yours means you can do whatever you want without risking your own server or domain being taken down for abuse, instead risking my server. So I added code to forward an X-Forwarded-For header, which contains the real IP address of the client. Also random URLs have the ip address added to them.

apitman 3y ago
I know what the X-Forwarded-For is, but I'm confused by what you mean here. Can you go into a bit more detail as to what you implemented and how it prevents phishing?
- aussieguy1234 3y ago
  It's a header that contains the IP address of the machine that ran the Tunnelmole client, which ensures it can't be used anonymously. My theory here is that phishers and other nefarious actors are attracted to this type of service so they can hide their origin server. I haven't had alot of phishing issues since introducing that header and the IP address in random domains. I'll see if I can get tunnelmole.net added to that public suffix list. One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain.
  - apitman 3y ago
    Interesting. I see what you mean by the random domains now. Creative idea! > One reason tunnels go through tunnelmole.net instead of tunnelmole.com is to protect the reputation of the main domain. Definitely recommend you keep it that way. There's not saying what various orgs will do. I believe at one point Facebook messenger blocked links to .xyz TLD domains entirely. Maybe they still do.
russorat 3y ago
PM from ngrok here. First, awesome project! Love to see new projects and ideas in the space. Fighting phishing (and other abuse) is a constant battle for us. As you may know, we do similar things to publish IP addresses, but we've had to add a bunch of other stuff to combat this over the years. I'm happy to share ideas and collaborate if you want to reach out. russ at ngrok dot com. Again, super awesome project and great work!