# FinalDestination::SSRFDetector
**URL:** https://meta.discourse.org/t/finaldestination-ssrfdetector/300499
**Category:** Support
**Created:** [March 22, 2024, 8:35am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499 "2024-03-22T08:35:48Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@peyrusse](https://meta.discourse.org/u/peyrusse)
#### Post date: [March 22, 2024, 8:35am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/1 "2024-03-22T08:35:48Z")
Hello,
I’m on an intranet environment and i try to install a new theme from this url :
[https://github.com/discourse/discourse-air](https://github.com/discourse/discourse-air)
When i try to install it, i got this error message :
Failed to process hijacked response correctly : FinalDestination::SSRFDetector::LookupFailedError : FinalDestination: lookup failed
Any idea how to solve this ?
Regards.
---
### Author:  [@peyrusse](https://meta.discourse.org/u/peyrusse)
#### Post date: [March 25, 2024, 10:34am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/2 "2024-03-25T10:34:19Z")
Hello, any help would be appreciated 😉
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [March 25, 2024, 10:54am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/3 "2024-03-25T10:54:47Z")
This error is thrown when something attempts to connect to a private/internal IP address. If you’re getting it when cloning a theme from GitHub, then that suggests your intranet is pointing GitHub’s DNS record to some internal IP address… which is quite unusual! Is that expected in your intranet environment?
There is a site setting ‘allowed internal hosts’ which can be used to add hostnames which will bypass Discourse’s SSRF protections. Adding `github.com` there may help, but will also affect the security of Discourse.
Another option would be to download the theme from GitHub manually and then upload it to Discourse. But of course, that would mean you won’t get any automated updates.
---
### Author:  [@peyrusse](https://meta.discourse.org/u/peyrusse)
#### Post date: [March 25, 2024, 11:04am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/4 "2024-03-25T11:04:46Z")
I have tried adding [github.com](http://github.com) to “allowed internal hosts” but it doesn’t work, neither trying to import a zip file with the theme :
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [March 25, 2024, 11:08am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/5 "2024-03-25T11:08:01Z")
Ah I see, ‘lookup failed’ suggests that your Discourse instance can’t make a DNS lookup at all. Does your intranet allow access to the internet?