# IP Spoofing Attack

**URL:** https://meta.discourse.org/t/ip-spoofing-attack/67890
**Category:** Support
**Created:** [August 11, 2017, 5:19pm UTC](https://meta.discourse.org/t/ip-spoofing-attack/67890 "2017-08-11T17:19:55Z")
**Posts on this page:** 1
**Showing post:** 4

<div class="post-metadata">

### Author: ![SidV](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sidv/32/119460_2.png) [@SidV](https://meta.discourse.org/u/SidV)
#### Post date: [August 24, 2017, 12:20pm UTC](https://meta.discourse.org/t/ip-spoofing-attack/67890/4 "2017-08-24T12:20:30Z")

</div>

> [@codinghorror](#):
>
> Are either of you doing any weird proxying, or anything deviating from the normal Discourse Docker setup?

The setup was based on _[this guide](https://meta.discourse.org/t/running-other-websites-on-the-same-machine-as-discourse/17247)_.

The server is setup with multiple Discourse installs running under a single Nginx instance with separate vhosts.

For reference each vhost takes this form:

```plaintext
    server {
            listen 80;
            # change this
            server_name my-discourse-site.com;
            client_max_body_size 100M;
            location / {
            proxy_pass http://unix:/var/discourse/shared/ ***** /nginx.http.sock:;
                    proxy_set_header Host $http_host;
                    proxy_http_version 1.1;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            }
    }

```

---

_[View the full topic](https://meta.discourse.org/t/ip-spoofing-attack/67890)._