My nginx proxy config leak server IP address

Medow

Hello all:

I need to proxy a website using nginx proxy always leak my server IP and not showing the real vistor IP.

I make a clone for that config and point the proxy_pass to https://ipleak,net so you can see that the nginx proxy first show the real visitor IP , but if you go down you see that the server real IP is showing as a visitor IP.

Test it here: https://hdo.ooo

here is my config:

location / { proxy_set_header Accept-Encoding ""; proxy_set_header Host ipleak.net; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_request_headers on; proxy_pass https://ipleak.net/; proxy_redirect off; proxy_ssl_verify off; proxy_ssl_server_name on; }

please, help me with this.
Thanks.

imyuno

That's normal behaviour. You're passing along the HTTP request additional headers containing the client IP, however the connection to the end server (in this case ipleak.net) is still being opened by your server.

Medow

@imyuno said:
That's normal behaviour. You're passing along the HTTP request additional headers containing the client IP, however the connection to the end server (in this case ipleak.net) is still being opened by your server.
@imyuno said:
That's normal behaviour. You're passing along the HTTP request additional headers containing the client IP, however the connection to the end server (in this case ipleak.net) is still being opened by your server.
@imyuno said:
That's normal behaviour. You're passing along the HTTP request additional headers containing the client IP, however the connection to the end server (in this case ipleak.net) is still being opened by your server.

Thanks for reply.
Is there any way to override this?

teamacc

https://serverfault.com/questions/314574/nginx-real-ip-header-and-x-forwarded-for-seems-wrong

hzr

Medow said: Thanks for reply. Is there any way to override this?

Only if you control the final server destination. Otherwise no.

Medow

@teamacc said:
https://serverfault.com/questions/314574/nginx-real-ip-header-and-x-forwarded-for-seems-wrong

I go through the above link and sure there is soo many useful infos there. But why in the above example https://hdo.ooo it show 2 deferent IPs . It shows my real home IP and my server IP in the same time.
I try to make adjustment according to the link you provide but still leak my server IP.

hzr

Medow said: still leak my server IP.

Your server is making the connection, what do you expect