thinproxy.conf.example

# thinproxy configuration file
# Lines starting with # are comments. Inline comments are supported.
# CLI flags override values set here.

# Bind address (default: 127.0.0.1)
listen 127.0.0.1

# Listen port (default: 8080)
port 8080

# Drop privileges to this user after binding
#user _thinproxy

# Run as daemon and log to syslog (default: no)
#daemon yes

# Verbose logging (default: no)
#verbose no

# Maximum concurrent connections (default: 512, max: 512)
#max_connections 512

# Maximum concurrent connections per source IP (default: 32)
#max_connections_per_ip 32

# Close idle connections after this many seconds (default: 300)
#idle_timeout 300

# Block connections to private/reserved addresses (default: yes)
# Prevents SSRF by denying RFC 1918, loopback, link-local, etc.
#deny_private yes

# Restrict CONNECT method to specific ports (default: 443)
# When set, CONNECT to unlisted ports is denied with 403.
# Config entries replace the defaults.
#connect_port 443
#connect_port 8443

# Access control lists
# Use either "allow" or "deny" directives, not both.
#
# Whitelist mode: only listed addresses are permitted (deny rest)
#allow 127.0.0.1
#allow 192.168.1.0/24
#allow 10.0.0.0/8
#allow ::1
#
# Blacklist mode: listed addresses are blocked (allow rest)
#deny 203.0.113.0/24
#deny 198.51.100.0/24