I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get t…

i asked this question about a month ago about link previews and got no help :facepalm:

Hopefully someone from the team is able to help us soon.

From what I understand discourse fetches the link server side to generate the preview. Post a malicious link controlled by attacker, check server access logs, get IP address attack and site go down. Easy peasy

It was so easy grabbing the IP of Discourse Meta Backend from image preview using an IP Logger. For obvious reasons I’ve redacted Discourse’s backend IP Address from the images showing evidence. Proof: [55 PM] [05 PM]

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the pro…

Provide instructions? Also localhost:9050 exits through Tor.

Discourse Link previews through a proxy server?

Unterstützung Installation

schungx (Stephen Chung) 25. Oktober 2017 um 02:32 4

Purely out of curiosity… How does previewing a link leak ip info?

Thema		Antworten	Aufrufe
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	89	23. März 2026
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	1949	19. August 2023
Discourse behind reverse proxy and https Self-hosting	18	7310	13. März 2022
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	19	2152	12. Juli 2022
Installing Discourse Behind Reverse Proxy using recommended (supported) installation Self-hosting	6	3581	10. Februar 2025

Discourse Link previews through a proxy server?

Verwandte Themen