We are running a Discourse instance on our server, but we’ve encountered an issue where anyone can take our server’s public IP and create an A record on their own domain, effectively pointing their domain to our forum. We want to ensure that only our authorized domain can be used to access the foru…

Are you using a standard install ? By default discourse redirects to the hostname.

[이미지] Jay Pfaffman: By default discourse redirects to the hostname How would that play any roll? OP suggests now that everyone can mess up practically every web services in the world. Never mind. That’s why we have to configure hosts for web services. Everywhere, everytime, including Discour…

Thanks @Jagster and @pfaffman - I am working with @Abdelrahman_MoHamed on this. For my own understanding, if this is our discourse domain: forum.get.it which points to → 34.170.141.119 And someone sets up, lets say.. hijack.get.it and points it to → 34.170.141.119 The expected behavior is that …

[이미지] Jacob Peebles: The expected behavior is that when someone types in: hijack.get.it it will redirect to forum.get.it Yes. That’s the expected behavior and it appears to be the actual behavior. As far as I can tell you don’t have a problem. And most browsers will default to https: and htt…

Yes, but nothing happens. Totally same thing that you have right now someone knocking using ssh, bots etc. If you set up such site/forum then yes they would send visitors who would see what ever you started using that domain. But they can’t hijack your domain, because you are telling to world wich …

[이미지] Jacob Peebles: hijack.get.it it will redirect to forum.get.it I understand that was just an example, but that spesific situation is impossible, because you own domain get.it and its nameservers dont know such DNS that would point to hijack.get.it` :smirking_face:

[이미지] Jacob Peebles: forum.get.it which points to → 34.170.141.119 And someone sets up, lets say… hijack.get.it and points it to → 34.170.141.119 Yes, @Jagster is right. If you own get.it (btw, wow, $$$$$) someone else cannot use your domain just with another subdomain.

권한 없는 도메인이 Discourse 인스턴스를 가리키지 않도록 방지하기

제품 지원

pfaffman (Jay Pfaffman) 2월 9, 2025, 1:35오후 2

표준 설치를 사용 중이신가요? 기본적으로 Discourse는 호스트 이름으로 리디렉션됩니다.

글		댓글	조회수
Deny access on domain name Self-hosting hosting	3	1342	11월 7, 2016
Using Custom Domain Product Support	12	1315	7월 20, 2024
After some hair pulling, I installed Discourse Self-hosting	2	651	2월 22, 2023
Forcing access to Discourse via domain name only Self-hosting	4	990	10월 5, 2017
Setup discourse.domain.com with main site at domain.com Self-hosting	5	1562	12월 26, 2020

권한 없는 도메인이 Discourse 인스턴스를 가리키지 않도록 방지하기

Related topics