+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Cloudflare bypass via smtp headers? Information Disclosure? (/showthread.php?tid=6006936)
Cloudflare bypass via smtp headers? Information Disclosure? - Venture - Sep 11, 2019
So I've noticed that a website that sends emails; does so on the back-end through php function; I also know that when receiving an email, the headers of the email usually contain the mail servers ip; Would this lead to disclosure of the servers IP address?
RE: Cloudflare bypass via smtp headers? Information Disclosure? - BTC - Sep 11, 2019
No it would just appear with a proxy address
RE: Cloudflare bypass via smtp headers? Information Disclosure? - SIGRU - Sep 11, 2019
If the backend server sends emails yes, it will leak the site IP, obviously.
This has been a well known method for "bypassing" CloudFlare for some time, and HF even used to be vulnerable to it many years ago.
RE: Cloudflare bypass via smtp headers? Information Disclosure? - BTC - Sep 11, 2019
(Sep 11, 2019 06:14 AM)SIGRU Wrote: If the backend server sends emails yes, it will leak the site IP, obviously.
This has been a well known method for "bypassing" CloudFlare for some time, and HF even used to be vulnerable to it many years ago.
Only if your mail server's records are not configured properly in cloudflare. Most people know how to do that, in fact it did it automatically for me.
RE: Cloudflare bypass via smtp headers? Information Disclosure? - SIGRU - Sep 11, 2019
(Sep 11, 2019 06:15 AM)BTC Wrote: Only if your mail server's records are not configured properly in cloudflare. Most people know how to do that, in fact it did it automatically for me.
CloudFlare doesn't proxy email traffic. The emails still originate from the mail server, which will be the backend and will therefore be found in the email header.