p2p/discover: apply netrestrict in discv5 response handler (ethereum#…

…25304)
blakehhuynh · Oct 7, 2022 · 37d6c75 · 37d6c75
1 parent daf8d7f
commit 37d6c75
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/p2p/discover/v5_udp.go b/p2p/discover/v5_udp.go
@@ -407,6 +407,9 @@ func (t *UDPv5) verifyResponseNode(c *callV5, r *enr.Record, distances []uint, s
 	if err := netutil.CheckRelayIP(c.node.IP(), node.IP()); err != nil {
 		return nil, err
 	}
+	if t.netrestrict != nil && !t.netrestrict.Contains(node.IP()) {
+		return nil, errors.New("not contained in netrestrict list")
+	}
 	if c.node.UDP() <= 1024 {
 		return nil, errLowPort
 	}