mirror of
https://github.com/wweir/sower.git
synced 2026-10-19 16:14:33 +00:00
handleHTTPConn's dial-failure branch only logged and returned, so a client saw a closed connection and could not tell a policy refusal (blocked target, this proxy's own listener) from a broken proxy. It now writes the same refusal response the SOCKS5-side HTTP path already writes (403 for blocked and self-target, 502 otherwise), and the shared-listener test asserts that status instead of the close.