# Mailgun leaking server's real IP behind Cloudflare

**URL:** <https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128>\
**Category:** Product Support\
**Created:** [March 15, 2017, 3:01am UTC](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128 "2017-03-15T03:01:37Z")\
**Posts on this page:** 1\
**Showing post:** 18

<div class="post-metadata">

**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\
**Post date:** [May 16, 2019, 2:17pm UTC](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128/18 "2019-05-16T14:17:46Z")

</div>

Not really, Cloudflare is only used by the client connection, any oneboxing or image embedding by URL is done directly. It’s very easy to bypass and precisely why we regularly have to stress that Cloudflare isn’t a substitute to a firewall.

---

_[View the full topic](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128)._