I keep my forum’s server behind cloud flare due to a large amount of attacks against the site. The link previews and emails can leak the server’s backend IP Address. The email issue was resolved by setting up a SMTP relay that strips headers (if the user pulls email headers to get the IP, they get t…

i asked this question about a month ago about link previews and got no help :facepalm:

Hopefully someone from the team is able to help us soon.

From what I understand discourse fetches the link server side to generate the preview. Post a malicious link controlled by attacker, check server access logs, get IP address attack and site go down. Easy peasy

It was so easy grabbing the IP of Discourse Meta Backend from image preview using an IP Logger. For obvious reasons I’ve redacted Discourse’s backend IP Address from the images showing evidence. Proof: [55 PM] [05 PM]

Ah. Then it is not a discourse issue. It is a network setup issue for your server. Your server needs to set up networking with a proxy. Then anything accessing the network, including discourse, will automatically go thru the proxy.

Yes you will need to set up a proxy for outgoing traffic on your server this has nothing to do with us.

Alright so how do configure Discourse to connect to the proxy? Where do I configure proxy settings. If I could just forward traffic to go through SOCKS localhost:9050 I could route through Tor without an issue.

Your comments are very confusing and doesn’t look like it is related to a proxy at all. A proxy is for OUTGOING traffic. localhost:9050 is INCOMING, unless you mean all your out-going traffic is going out via port 9050. Check careful the answer: You don’t configure Discourse to connect to the pro…

Provide instructions? Also localhost:9050 exits through Tor.

Discourse Link previews through a proxy server?

支持安装

schungx (Stephen Chung) 2017 年10 月 25 日 02:32 4

Purely out of curiosity… How does previewing a link leak ip info?

话题		回复	浏览量
Stop Discourse leaking its Host IP adress when preloading links/ressources Self-hosting	5	89	2026 年3 月 23 日
Reverse proxy for Discourse \| Real IP masking Self-hosting	14	1949	2023 年8 月 19 日
Discourse behind reverse proxy and https Self-hosting	18	7310	2022 年3 月 13 日
Discourse shows server IP/localhost as user's IP Self-hosting unsupported-install	19	2152	2022 年7 月 12 日
Installing Discourse Behind Reverse Proxy using recommended (supported) installation Self-hosting	6	3582	2025 年2 月 10 日

Discourse Link previews through a proxy server?

相关话题