I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get t…

i asked this question about a month ago about link previews and got no help :facepalm:

Hopefully someone from the team is able to help us soon.

From what I understand discourse fetches the link server side to generate the preview. Post a malicious link controlled by attacker, check server access logs, get IP address attack and site go down. Easy peasy

It was so easy grabbing the IP of Discourse Meta Backend from image preview using an IP Logger. For obvious reasons I’ve redacted Discourse’s backend IP Address from the images showing evidence. Proof: [55 PM] [05 PM]

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the pro…

Provide instructions? Also localhost:9050 exits through Tor.

Discourse Link previews through a proxy server?

Support Self-hosting

schungx (Stephen Chung) 2017 年 10 月 25 日午前 2:32 4

Purely out of curiosity… How does previewing a link leak ip info?

トピック		返信	表示
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	150	2026 年 3 月 23 日
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	2063	2023 年 8 月 19 日
Discourse behind reverse proxy and https Self-hosting	18	7581	2022 年 3 月 13 日
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	18	2377	2022 年 7 月 12 日
Proxying new setup with reverse proxy Self-hosting	1	84	2026 年 6 月 30 日

Discourse Link previews through a proxy server?

関連トピック