apps not responding with the correct IP address

[adison]

hello.
i have my website, for security reasons, proxied through cloudflare.
however, there is1problem i happen to have.
when people recieve an email showing them what IP logged in, it does not show the correct IP.
in stead, it shows a private IP address.

[girish]

@adison said in apps not responding with the correct IP address:

when people recieve an email showing them what IP logged in, it does not show the correct IP.

Which people? Are you referring to Cloudron admins or your website users?

Also, which notification is this? Is this Cloudron's login from new device notification email?

[adison]

both admins and users. and this comes from all domains except for unproxied domains [witch are company employees only]

[nebulon]

The situation is still quite unclear. Please provide as much context as possible.

I guess you refer to the email notification Cloudron sends out when someone from a new location logs into the dashboard?
Please also explain which IPs are all involved here and which ones you would expect where.
Further I am not sure what this has to do with proxied or unproxied domains. Here it sounds like this may be related only to apps having Cloudflare in front of them, but then again, Cloudron itself only sends out login emails for the dashboard, so which apps are you referring to?

Please understand that we have a lot of various setups to support, and it's often very hard to guess correctly without a lot of specific details.

[adison]

i'm refurring to the following applications. these are all proxied, by the way.
wordpress, pointing to blindsoft.net
community.blindsoft.net element.
passwords.blindsoft.net, pointing to vaultwarden.
coms.blindsoft.net, chatwoot.
social.blindsoft.net humhub
ctc.community, mastodon.
vids.ctc.community, peertube.
audio.blindsoft.net, audiobookshelf.
cyber.blindsoft.net, wordpress.
wp-test.blindsoft.net, wordpress.
these are all proxied through cloudflare, and whenever an email is sent to someone from the smtp server, in stead of responding with the correct IP, it responds with a private IP, where as apps like
epass.blindsoft.net
vaultwarden, out of the proxy, will respond with the correct IP address.

[adison]

and yes, they are all login emails

[fbartels]

@adison maybe it would help if you could post a screenshot of such a mail. Plus provide an example of such an ip mixup. Is it the IP of the cloudflare proxy?

[adison]

i'm sorry, but i'm a blind person. i don't knw how to screenshot

[robi]

@adison perhaps you can copy/paste a few examples of what you're experiencing to help us make it more obvious.

[fbartels]

@adison how are you interaction with cloudron then. Are you using a Screenreader or some kind of braille display? Maybe some information gets lost or is interpreted differently?

[adison]

i'm using a screen reader

[girish]

@adison If I understand correctly :

• Cloudron is behind Cloudflare
• New user notifications emails have Cloudflare IP instead of having the Client IP

We added trusted ip feature in 7.5 for exactly this - https://docs.cloudron.io/networking/#trusted-ips . Unfortunately, 7.5.0 has a bug where new user login emails are not sent at all. This is fixed in 7.5.1 (due in coming week or so).

[adison]

aha yes, this might work. also for cloudflare, you should have like a feature where it can automatically put in trusted cloudflare IP addresses if it detects that its being proxied through cloudflare

[adison]

alright, i have just tested the feature, and it works.
thanks