apps not responding with the correct IP address

[adison]

i'm refurring to the following applications. these are all proxied, by the way.
wordpress, pointing to blindsoft.net
community.blindsoft.net element.
passwords.blindsoft.net, pointing to vaultwarden.
coms.blindsoft.net, chatwoot.
social.blindsoft.net humhub
ctc.community, mastodon.
vids.ctc.community, peertube.
audio.blindsoft.net, audiobookshelf.
cyber.blindsoft.net, wordpress.
wp-test.blindsoft.net, wordpress.
these are all proxied through cloudflare, and whenever an email is sent to someone from the smtp server, in stead of responding with the correct IP, it responds with a private IP, where as apps like
epass.blindsoft.net
vaultwarden, out of the proxy, will respond with the correct IP address.

[adison]

and yes, they are all login emails

[fbartels]

@adison maybe it would help if you could post a screenshot of such a mail. Plus provide an example of such an ip mixup. Is it the IP of the cloudflare proxy?

[adison]

i'm sorry, but i'm a blind person. i don't knw how to screenshot

[robi]

@adison perhaps you can copy/paste a few examples of what you're experiencing to help us make it more obvious.

[fbartels]

@adison how are you interaction with cloudron then. Are you using a Screenreader or some kind of braille display? Maybe some information gets lost or is interpreted differently?

[adison]

i'm using a screen reader

[girish]

@adison If I understand correctly :

• Cloudron is behind Cloudflare
• New user notifications emails have Cloudflare IP instead of having the Client IP

We added trusted ip feature in 7.5 for exactly this - https://docs.cloudron.io/networking/#trusted-ips . Unfortunately, 7.5.0 has a bug where new user login emails are not sent at all. This is fixed in 7.5.1 (due in coming week or so).

[adison]

aha yes, this might work. also for cloudflare, you should have like a feature where it can automatically put in trusted cloudflare IP addresses if it detects that its being proxied through cloudflare

[adison]

alright, i have just tested the feature, and it works.
thanks