settings. add PERMIT_PRIVATE_IP_TARGETS to allow/forbid private IPs

flowspec/validators.py

@@ -18,7 +18,10 @@ def get_network(ip):
 
 
 def clean_ip(address):
-    if False and address.is_private:
+    if not hasattr(settings, "PERMIT_PRIVATE_IP_TARGETS"):
+        settings.PERMIT_PRIVATE_IP_TARGETS = True
+
+    if settings.PERMIT_PRIVATE_IP_TARGETS == False and address.is_private:
             return _('Private addresses not allowed')
 
     if address.version == 4 and int(address.prefixlen) == 32:

flowspy/settings.py.dist

@@ -393,6 +393,9 @@ SNMP_MAX_SAMPLECOUNT = 12
 # Age of inactive routes that can be already removed (in seconds)
 SNMP_REMOVE_RULES_AFTER = 3600
 
+# If PERMIT_PRIVATE_IP_TARGETS is False, then users are not allowed to enter IP addresses from private IP ranges; it is True by default
+PERMIT_PRIVATE_IP_TARGETS = True
+
 ##############################################################################
 ##############################################################################