I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get t…

i asked this question about a month ago about link previews and got no help :facepalm:

Hopefully someone from the team is able to help us soon.

From what I understand discourse fetches the link server side to generate the preview. Post a malicious link controlled by attacker, check server access logs, get IP address attack and site go down. Easy peasy

It was so easy grabbing the IP of Discourse Meta Backend from image preview using an IP Logger. For obvious reasons I’ve redacted Discourse’s backend IP Address from the images showing evidence. Proof: [55 PM] [05 PM]

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the pro…

Provide instructions? Also localhost:9050 exits through Tor.

Discourse Link previews through a proxy server?

Support Self-hosting

schungx (Stephen Chung) 25 oktober 2017 om 02:32 4

Purely out of curiosity… How does previewing a link leak ip info?

Topic		Antwoorden	Weergaven
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	192	23 maart 2026
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	2136	19 augustus 2023
Discourse behind reverse proxy and https Self-hosting	18	7638	13 maart 2022
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	18	2423	12 juli 2022
Proxying new setup with reverse proxy Self-hosting	1	100	30 juni 2026

Discourse Link previews through a proxy server?

Gerelateerde topics