# Cross referencing a post doesn't create onebox

**URL:** https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327
**Category:** Support
**Created:** [June 11, 2017, 10:02pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327 "2017-06-11T22:02:51Z")
**Posts on this page:** 14
**Page:** 1

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 11, 2017, 10:02pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/1 "2017-06-11T22:02:51Z")

</div>

I’m trying to cross reference another post while replying to a post, it only posts the link and doesn’t create a OneBox embedded post.

Is there any setting to enable this feature? I just see it a circle briefly as I post the thread link on the same forum and then it just stays as a link.

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 11, 2017, 10:39pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/2 "2017-06-11T22:39:55Z")

</div>

This is VERY odd because it’s creating one boxes for posts from other websites or even from this forum, but links cross references within the same forum isn’t working, I just a animated circle next to the link and then it disappears. Any suggestions?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 11, 2017, 10:42pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/3 "2017-06-11T22:42:49Z")

</div>

If your local ips resolve to a private ip range oneboxer will no longer process them for security reasons. We should probably have a setting for this @eviltrout.

I wonder if the oneboxer should return a “cannot onebox local IPs” onebox to make it more clear this is happening?

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 11, 2017, 10:48pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/4 "2017-06-11T22:48:55Z")

</div>

> [@codinghorror](#):
>
> I wonder if the oneboxer should return a “cannot onebox local IPs” onebox to make it more clear this is happening

This would be great.

Also led me to investigate the DNS resolution. The DNS resolution of the server name wasn’t correct. Apparently Google’s DNS’s aren’t as good as one thinks, they’re referring to some old cached IP, switched to Level3 DNS. That fixed the DNS resolution of the server’s domain, however it hasn’t fixed the issue, discourse still appears to be using the old / cached IP (I’m taking an educated guess because onebox from other websites is working just not within the same domain, i.e. it’s still using the old cached IP returned by Google’s DNS)

Do I need to restart the service or rebuild it? If the DNS servers change at runtime what needs to be done to get Discourse to use the new DNS servers?

EDIT: Rebooted the machine but still doesn’t seem to work. Any suggestions? Is a rebuild required for a DNS server change?

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 11, 2017, 11:05pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/5 "2017-06-11T23:05:21Z")

</div>

> [@codinghorror](#):
>
> local ips resolve to a private ip range oneboxer will no longer process

Are you saying that if the local machine has a private IP (e.g. is behind an AWS elastic IP) oneboxer won’t work? The machine has to have a public IP?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [June 11, 2017, 11:08pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/6 "2017-06-11T23:08:44Z")

</div>

@eviltrout can explain Monday why this is a security risk and is locked down out of the box.

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 11, 2017, 11:12pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/7 "2017-06-11T23:12:10Z")

</div>

Okay thanks, looking forward to the patch to enable this for private IP’s. Is there a YAML setting or something I can use meanwhile.

---

<div class="post-metadata">

### Author: ![elijah](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/elijah/32/104055_2.png) [@elijah](https://meta.discourse.org/u/elijah)
#### Post date: [June 12, 2017, 3:03am UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/8 "2017-06-12T03:03:28Z")

</div>

I can explain right now.

I’ve got a webserver right now running with two interfaces. One of those has port 80 and port 443 open to the outside world, and everything else locked down.

The other interface is on a 10.x.y.z internal network. DNS resolution happens through here, and routing defaults to use this interface. (It’s also how I ssh in, when I need to.)

If you can onebox stuff like say, my internal wiki, Discourse could act as a reverse proxy for you to probe my internal webpages. (Actually, the wiki won’t work, because you need a login to even view pages. But the point still stands.) Certainly the server can reach some internal webpages, but guessing the names would be difficult.

Locking oneboxes to only things on public Internet addesses limits the content to stuff that, presumably, you could access anyway.

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 12, 2017, 1:49pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/9 "2017-06-12T13:49:26Z")

</div>

> [@RBoy](#):
>
> Are you saying that if the local machine has a private IP (e.g. is behind an AWS elastic IP) oneboxer won’t work? The machine has to have a public IP?

@eviltrout how can I enable OneBox to use private IP’s to retrieve content? Is this a setting that can be made available (with a suitable warning below) in the Admin toolbox please.

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 12, 2017, 2:57pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/10 "2017-06-12T14:57:38Z")

</div>

You have to be patient - jeff only suggested a setting 16 hours ago. I will get it done today.

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 12, 2017, 2:58pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/11 "2017-06-12T14:58:12Z")

</div>

Wow - I was only looking for a workaround, you guys are awesome, thanks!

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 12, 2017, 6:15pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/13 "2017-06-12T18:15:59Z")

</div>

Can you try the latest Discourse? I made it so that oneboxing the same forum should always work:

[https://github.com/discourse/discourse/commit/a3729b51ebc9958904f15e5105754380de723997](https://github.com/discourse/discourse/commit/a3729b51ebc9958904f15e5105754380de723997)

I don’t think a setting is required.

---

<div class="post-metadata">

### Author: ![RBoy](https://avatars.discourse-cdn.com/v4/letter/r/2bfe46/32.png) [@RBoy](https://meta.discourse.org/u/RBoy)
#### Post date: [June 12, 2017, 7:01pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/14 "2017-06-12T19:01:04Z")

</div>

Brilliant, working like a charm! Thank you for the lightning response. 👍

---

<div class="post-metadata">

### Author: ![eviltrout](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eviltrout/32/5275_2.png) [@eviltrout](https://meta.discourse.org/u/eviltrout)
#### Post date: [June 12, 2017, 7:14pm UTC](https://meta.discourse.org/t/cross-referencing-a-post-doesnt-create-onebox/64327/15 "2017-06-12T19:14:37Z")

</div>


