openclaw - 💡(How to fix) Fix [Feature] Add configurable SSRF policy for web_fetch (parity with browser tool) [1 comments, 2 participants]

Problem

web_fetch has a hardcoded SSRF check that blocks requests to private/reserved IP ranges. This conflicts with FakeIP proxy mode (used by Clash, Surge, and similar transparent proxies), where DNS intentionally returns reserved IPs (e.g. 198.18.x.x) as placeholders — actual traffic is intercepted and forwarded by the proxy at the network layer.

The request never reaches the proxy because web_fetch rejects the resolved IP before making the HTTP call.

Current behavior

• web_fetch resolves DNS → gets 198.18.x.x → blocks as private/reserved IP → request fails
• No configuration option exists to disable or customize this check

Expected behavior

web_fetch should support a configurable SSRF policy, similar to what the browser tool already provides:

// browser already has this:
"browser": {
  "ssrfPolicy": {
    "dangerouslyAllowPrivateNetwork": true,
    "allowedHostnames": ["example.com"]
  }
}

Proposed solution

Add SSRF policy configuration under tools.web.fetch (or a shared top-level ssrfPolicy), for example:

"tools": {
  "web": {
    "fetch": {
      "ssrfPolicy": {
        "dangerouslyAllowPrivateNetwork": true
        // or allowedHostnames / allowedCIDRs
      }
    }
  }
}

Key points:

• SSRF protection should remain enabled by default (no security regression)
• Users in FakeIP environments can opt in to allow private IPs
• Ideally share the same policy schema as browser.ssrfPolicy for consistency

Context

• FakeIP is a common proxy mode in tools like Clash, Surge, Shadowrocket, etc.
• The 198.18.0.0/15 range is used as FakeIP pool by default in most implementations
• browser tool already handles this via ssrfPolicy.dangerouslyAllowPrivateNetwork
• tavily_extract works as a workaround (server-side fetch), but web_fetch is the primary tool for URL content extraction

Environment

• OpenClaw version: 2026.3.23-2
• OS: macOS (arm64)
• Network: transparent proxy with FakeIP mode