<![CDATA[don't let webserver respond]]>hello. when i go to my webservers IP, cloudron, it responds. this is kinda dangerous. and it shouldn't direct to your my domain either. in stead, it should take you to your main website, AKA the first domain you imported when setting up. it could be dangerous for the IP to respond.
thanks

]]>https://forum.cloudron.io/topic/9650/don-t-let-webserver-respondRSS for NodeSat, 10 Oct 2026 04:44:36 GMTSun, 16 Jul 2023 22:06:20 GMT60<![CDATA[Reply to don't let webserver respond on Thu, 20 Jul 2023 13:56:58 GMT]]>@adison it reads "You are seeing this page because the DNS record of $host is set to this server's IP but Cloudron has no app configured for this domain." But instead of $host its the ip or dns name you just requested.

]]>https://forum.cloudron.io/post/70582https://forum.cloudron.io/post/70582Thu, 20 Jul 2023 13:56:58 GMT<![CDATA[Reply to don't let webserver respond on Thu, 20 Jul 2023 13:51:44 GMT]]>as for the image, i am a blind person. please explain the image if you can

]]>https://forum.cloudron.io/post/70581https://forum.cloudron.io/post/70581Thu, 20 Jul 2023 13:51:44 GMT<![CDATA[Reply to don't let webserver respond on Thu, 20 Jul 2023 13:50:53 GMT]]>yes, that is what i mena

]]>https://forum.cloudron.io/post/70580https://forum.cloudron.io/post/70580Thu, 20 Jul 2023 13:50:53 GMT<![CDATA[Reply to don't let webserver respond on Tue, 18 Jul 2023 17:47:43 GMT]]>I still don't fully understand your request.

Do you mean this screen?

image.png
That should not respond? 🤔
You say you are using Cloudflare, so you mask the IP with the proxy feature.

Oh and because the unknown wildcard record responds to the normal IP it will expose the real IP, that is what you mean, right?

]]>https://forum.cloudron.io/post/70458https://forum.cloudron.io/post/70458Tue, 18 Jul 2023 17:47:43 GMT<![CDATA[Reply to don't let webserver respond on Tue, 18 Jul 2023 10:53:55 GMT]]>*will be shown. my bad, my keyboard went wild on me

]]>https://forum.cloudron.io/post/70425https://forum.cloudron.io/post/70425Tue, 18 Jul 2023 10:53:55 GMT<![CDATA[Reply to don't let webserver respond on Tue, 18 Jul 2023 10:52:42 GMT]]>yeah, if someone, say, tryes pinging it, or doing an nmap scan on it, wile the IP won't be shown, it cant respond or do anything.

]]>https://forum.cloudron.io/post/70424https://forum.cloudron.io/post/70424Tue, 18 Jul 2023 10:52:42 GMT<![CDATA[Reply to don't let webserver respond on Tue, 18 Jul 2023 10:50:56 GMT]]>its dangerous because if i know it responds, then i know its up.
then, if the ISP/VPS provider is not robust, i can start fludding it with DDOS attacks or doing nasty things with the IP itself. what i usually do myself is just disallow all ports on the webserver to the public, only allowing port443 on cloudflares IPs, then only allwoing ports443 and 22 for my vpn so i can access the dashboard.

]]>https://forum.cloudron.io/post/70423https://forum.cloudron.io/post/70423Tue, 18 Jul 2023 10:50:56 GMT<![CDATA[Reply to don't let webserver respond on Mon, 17 Jul 2023 04:31:12 GMT]]>Why is it dangerous to respond? It will only show a template page like "You are seeing this page because the DNS record of xx is set to this server's IP but Cloudron has no app configured for this domain." .

It intentionally does not redirect anywhere (to an app or the dashboard) so as to not leak the domain name. Note that we can't redirect either to main website because this would mean a http redirect which in turn means we are leaking domain name.

]]>https://forum.cloudron.io/post/70348https://forum.cloudron.io/post/70348Mon, 17 Jul 2023 04:31:12 GMT