From 670f581185a54c1d026bc0d8e49700e3c6c1a71b Mon Sep 17 00:00:00 2001
From: aoshiguchen <1052045476@qq.com>
Date: Sat, 9 Dec 2023 22:28:34 +0800
Subject: [PATCH] =?UTF-8?q?udp=E4=BB=A3=E7=90=86=E4=B8=8B=E5=AE=89?=
 =?UTF-8?q?=E5=85=A8=E7=BB=84=E6=94=BE=E8=A1=8C=E9=80=BB=E8=BE=91=E8=B0=83?=
 =?UTF-8?q?=E6=95=B4?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../server/proxy/core/UdpVisitorChannelHandler.java   | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

diff --git a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
index dd24ae61..876bf41f 100644
--- a/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
+++ b/neutrino-proxy-server/src/main/java/org/dromara/neutrinoproxy/server/proxy/core/UdpVisitorChannelHandler.java
@@ -42,9 +42,7 @@ public class UdpVisitorChannelHandler extends SimpleChannelInboundHandler<Datagr
         InetSocketAddress sa = (InetSocketAddress) visitorChannel.localAddress();
 
         // 判断IP是否在该端口绑定的安全组允许的规则内
-        if (!securityGroupService.judgeAllow(IpUtil.getRemoteIp(ctx), portMappingService.getSecurityGroupIdByMappingPort(sa.getPort()))) {
-            // 不在安全组规则放行范围内
-            ctx.channel().close();
+        if (!securityGroupService.judgeAllow(datagramPacket.sender().getAddress().getHostAddress(), portMappingService.getSecurityGroupIdByMappingPort(sa.getPort()))) {
             return;
         }
 
@@ -134,13 +132,6 @@ public class UdpVisitorChannelHandler extends SimpleChannelInboundHandler<Datagr
 
     @Override
     public void channelActive(ChannelHandlerContext ctx) throws Exception {
-        // 判断IP是否在该端口绑定的安全组允许的规则内
-        InetSocketAddress sa = (InetSocketAddress) ctx.channel().localAddress();
-        if (!securityGroupService.judgeAllow(IpUtil.getRemoteIp(ctx), portMappingService.getSecurityGroupIdByMappingPort(sa.getPort()))) {
-            // 不在安全组规则放行范围内
-            ctx.channel().close();
-            return;
-        }
         super.channelActive(ctx);
     }