--block-private-ips
- CLI
- --block-private-ips
- REST
- CLI only
Stops the browser from connecting to private, loopback and link-local addresses, so a captured page cannot reach internal hosts. --server turns it on.
| Range | Covers |
|---|---|
127., ::1/ | loopback |
10., 172., 192. | private networks, Docker’s default bridge included |
169., fe80::/ | link-local, the cloud metadata endpoint 169. included |
fc00::/ | IPv6 unique local |
The filter is a best-effort layer; isolate a host that must stay unreachable with network egress rules.
Example
CLI
Run locally
zshot -f pipeline.png --block-private-ips https://zshot-cli.com/example_assets/zrm/