# FinalDestination::SSRFDetector **URL:** \ **Category:** Product Support\ **Created:** [March 22, 2024, 8:35am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499 "2024-03-22T08:35:48Z")\ **Posts on this page:** 1\ **Showing post:** 3
**Author:** ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)\ **Post date:** [March 25, 2024, 10:54am UTC](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499/3 "2024-03-25T10:54:47Z")
This error is thrown when something attempts to connect to a private/internal IP address. If you’re getting it when cloning a theme from GitHub, then that suggests your intranet is pointing GitHub’s DNS record to some internal IP address… which is quite unusual! Is that expected in your intranet environment? There is a site setting ‘allowed internal hosts’ which can be used to add hostnames which will bypass Discourse’s SSRF protections. Adding `github.com` there may help, but will also affect the security of Discourse. Another option would be to download the theme from GitHub manually and then upload it to Discourse. But of course, that would mean you won’t get any automated updates. --- _[View the full topic](https://meta.discourse.org/t/finaldestination-ssrfdetector/300499)._