# Mailgun leaking server's real IP behind Cloudflare

**URL:** https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128
**Category:** Support
**Created:** [March 15, 2017, 3:01am UTC](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128 "2017-03-15T03:01:37Z")
**Posts on this page:** 1
**Showing post:** 7

<div class="post-metadata">

### Author: ![michaeld](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/michaeld/32/1594_2.png) [@michaeld](https://meta.discourse.org/u/michaeld)
#### Post date: [March 15, 2017, 6:11am UTC](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128/7 "2017-03-15T06:11:12Z")

</div>

> [@anon67292109](#):
>
> Mailgun is leaking my DigitalOcean server IPs via emails deployed for Discourse

I warned you for that:

> [@\[PAYING GIG\] migrating servers, tweaking rate limits and implementing signup captcha](https://meta.discourse.org/t/paying-gig-migrating-servers-tweaking-rate-limits-and-implementing-signup-captcha/58859/2):
>
> Make sure your outgoing emails don’t leak the original IP address

I don’t think Mailgun has any options or settings for this. It’s best to set up a separate relay server inbetween Discourse and Mailgun, that removes those headers. See this article: [https://major.io/p/remove-sensitive-information-from-email-headers-with-postfix/](https://major.io/2013/04/14/remove-sensitive-information-from-email-headers-with-postfix/)

---

_[View the full topic](https://meta.discourse.org/t/mailgun-leaking-servers-real-ip-behind-cloudflare/59128)._