I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get t…

i asked this question about a month ago about link previews and got no help :facepalm:

Hopefully someone from the team is able to help us soon.

From what I understand discourse fetches the link server side to generate the preview. Post a malicious link controlled by attacker, check server access logs, get IP address attack and site go down. Easy peasy

It was so easy grabbing the IP of Discourse Meta Backend from image preview using an IP Logger. For obvious reasons I’ve redacted Discourse’s backend IP Address from the images showing evidence. Proof: [55 PM] [05 PM]

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the pro…

Provide instructions? Also localhost:9050 exits through Tor.

Discourse Link previews through a proxy server?

Soutien Installation

schungx (Stephen Chung) Octobre 25, 2017, 2:32 4

Purely out of curiosity… How does previewing a link leak ip info?

Sujet		Réponses	Vues
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	89	Mars 23, 2026
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	1949	Août 19, 2023
Discourse behind reverse proxy and https Self-hosting	18	7310	Mars 13, 2022
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	19	2152	Juillet 12, 2022
Installing Discourse Behind Reverse Proxy using recommended (supported) installation Self-hosting	6	3581	Février 10, 2025

Discourse Link previews through a proxy server?

Sujets connexes