In the admin screen for users we can see their last visited and registered IP addresses. In line with my company’s approach to privacy, we don’t want to record these but I can’t see a setting to switch it off. Is there something I’m missing, or would we have to fork Discourse? Or perhaps a plugin co…

There are a number of anti-abuse measures that rely on having knowledge of the client IP address in order to function. Also, the client IP is logged in a number of places, including at least two different log files (nginx access log and rails log), so you’ll need to modify some pretty deep config i…

Thank you for the quick answer Matt. We’ve already worked on the log files to stop IP addresses being recorded there. Looks like we’ll have to dig deeper for the remainder to not be logged. Seems to be beyond what a plugin can achieve.

You could likely setup a nginx proxy in front of Discourse and have it pass in 0.0.0.0 for all IP addresses. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Thanks very much @cpradio , that sounds like a good idea. I’ll suggest it to our developers.

Then you will need to turn off rate limiting, because everything will look like a DDOS.

Good thinking @Falco . I’ll change the rate settings if we go down that route.

Maybe it would be easier to let the IPs be recorded and then periodically run a query that changes them to random private ip addresses, say daily?

Thanks @codinghorror . Ideally we don’t want the IPs touching our database/logs but that’s something to consider.

Another idea is to intercept the IP lookup call and replace it with a modified, random version of the “real” IP (so every request doesn’t appear to come from the same IP, or a totally random IP). That would probably be safest in my opinion.

Possible to not log user IP addresses?

Support

tagawa (Daniel Davis) 2016 年6 月 28 日 07:40 11

@codinghorror That sounds like a really good compromise, avoiding having to turn off rate limiting. We’ll probably go with this, barring difficulties. Thanks for all the help to find a solution.

话题		回复	浏览量
IP logging on my site Support	5	1217	2020 年11 月 16 日
How to disable logging IP address? Support	3	2087	2023 年2 月 12 日
Privacy feature request: disabling or hashing logs (using cryptolog or similar) Feature privacy	4	2333	2017 年1 月 14 日
429 Too Many Requests - IP logs disabled - discourse can see 127.0.0.1 only Support	1	683	2022 年3 月 9 日
Using Discourse without IP logins Support privacy	0	99	2025 年6 月 8 日

Possible to not log user IP addresses?

相关话题