Filter node, passthrough and trusted remote requests to proxies

src/stratifier.c

@@ -5602,7 +5602,7 @@ static void parse_method(ckpool_t *ckp, sdata_t *sdata, stratum_instance_t *clie
 
 		/* Add this client as a trusted remote node in the connector and
 		 * drop the client in the stratifier */
-		if (!ckp->trusted[client->server]) {
+		if (!ckp->trusted[client->server] || ckp->proxy) {
 			LOGNOTICE("Dropping client %"PRId64" %s trying to authorise as remote node on non trusted server %d",
 				  client_id, client->address, client->server);
 			connector_drop_client(ckp, client_id);
@@ -5619,7 +5619,7 @@ static void parse_method(ckpool_t *ckp, sdata_t *sdata, stratum_instance_t *clie
 
 		/* Add this client as a passthrough in the connector and
 		 * add it to the list of mining nodes in the stratifier */
-		if (!ckp->nodeserver[client->server]) {
+		if (!ckp->nodeserver[client->server] || ckp->proxy) {
 			LOGNOTICE("Dropping client %"PRId64" %s trying to authorise as node on non node server %d",
 				  client_id, client->address, client->server);
 			connector_drop_client(ckp, client_id);
@@ -5635,6 +5635,12 @@ static void parse_method(ckpool_t *ckp, sdata_t *sdata, stratum_instance_t *clie
 	if (unlikely(cmdmatch(method, "mining.passthrough"))) {
 		char buf[256];
 
+		if (ckp->proxy) {
+			LOGNOTICE("Dropping client %"PRId64" %s trying to connect as passthrough on proxy server %d",
+				  client_id, client->address, client->server);
+			connector_drop_client(ckp, client_id);
+			drop_client(ckp, sdata, client_id);
+		} else {
 			/* We need to inform the connector process that this client
 			 * is a passthrough and to manage its messages accordingly. No
 			 * data from this client id should ever come back to this
@@ -5643,6 +5649,7 @@ static void parse_method(ckpool_t *ckp, sdata_t *sdata, stratum_instance_t *clie
 			snprintf(buf, 255, "passthrough=%"PRId64, client_id);
 			send_proc(ckp->connector, buf);
 			drop_client(ckp, sdata, client_id);
+		}
 		return;
 	}