Is it possible to determine the IP address of the server behind the proxy?

P

protasovmikhail2016-06-12 00:52:52

Nginx

protasovmikhail, 2016-06-12 00:52:52

Hello, if you use nginx as a proxy, can you find out the IP address of the proxied server?
If yes, how can this be avoided?
Thank you.

Reply

Answer the question

In order to leave comments, you need to log in

3 answer(s)

R

Rinsewind, 2016-06-12
@protasovmikhail

If the setup is done correctly - no, you can't.

C

cijiw, 2016-06-12
@cijiw

What about the meaning?
If you have servers at local addresses behind nginx, then what will help you (when accessed from outside) knowing that the server is 192.168
.

V

Vladimir Dubrovin, 2016-06-12
@z3apa3a

It depends on the configuration of not only the proxy, but also your server. For example, a server might make requests outward (such as downloading a user's avatar from a URL passed to it) or have an SSI vulnerability that would expose its location, or resolve client names that would allow location to be determined by the source of DNS requests. It is necessary to prohibit any outgoing traffic from the server or redirect it to a proxy.