server.js

@@ -36,6 +36,9 @@ var stats = {
     tunnels: 0
 };
 
+// are we serving from a subdomain?
+var sub = false; 
+
 function maybe_bounce(req, res, sock, head) {
     // without a hostname, we won't know who the request is for
     var hostname = req.headers.host;
@@ -44,6 +47,12 @@ function maybe_bounce(req, res, sock, head) {
     }
 
     var subdomain = tldjs.getSubdomain(hostname);
+    // if we're serving from a subdomain do a proper check
+    if (sub) {
+        var subsub = (subdomain || '').split('.');
+        subdomain = subsub.length > 1 ? subsub[0] : '';
+    }
+
     if (!subdomain) {
         return false;
     }
@@ -180,6 +189,8 @@ module.exports = function(opt) {
     opt = opt || {};
 
     var schema = opt.secure ? 'https' : 'http';
+    
+    sub = opt.sub || false;
 
     var app = express();