AliasMailKayıt Gerekli Değil10 Dakikalık Otomatik Kendini Yok EtmeSıfır Günlük ve Sıfır İzlemeSonsuza Kadar %100 ÜcretsizAnında Takma Ad OluşturmaGizlilik-Birinci MimariGüvenli HTML İşlemeÖzel Kullanıcı Adı İşlemeleriDünya Çapında ErişimAliasMailKayıt Gerekli Değil10 Dakikalık Otomatik Kendini Yok EtmeSıfır Günlük ve Sıfır İzlemeSonsuza Kadar %100 ÜcretsizAnında Takma Ad OluşturmaGizlilik-Birinci MimariGüvenli HTML İşlemeÖzel Kullanıcı Adı İşlemeleriDünya Çapında Erişim
📱 Sosyal Medya

Masked Outbound Webhooks.Hide origin IP & sign payloads with HMAC-SHA256.

Stream incoming emails to user-configured webhook endpoints through Cloudflare Edge Relay. Conceal backend server IP address, protect against SSRF, and verify payload authenticity.

📬 Anlık Kutuyu Aç📂 Site Haritası
Kılavuz Makalesi

3-Layer IP Masking & Cloudflare Edge Relay Architecture

Direct outbound webhooks from backend servers expose origin IP addresses in destination server logs, leaving cloud infrastructure vulnerable to tracing and targeted attacks. AliasMail uses a 3-Layer Edge Relay architecture powered by Cloudflare Workers to proxy outbound webhook requests.

HMAC-SHA256 Payload Signature Verification

Destination servers only log Cloudflare edge IP addresses (104.28.x.x / 2400:cb00::), completely concealing backend NestJS server IPs, hosting providers, and internal topology.

SSRF Protection & Subnet Security Guards

Every webhook dispatch includes an HMAC-SHA256 signature header (X-AliasMail-Signature) computed using Web Crypto API. Recipients can verify signature authenticity using their custom secret key while receiving sub-50ms real-time email payloads.

Kategori

📱 Sosyal Medya

Etiketler

#masked webhook delivery#outbound webhook ip masking#hmac sha256 signing#cloudflare edge relay#ssrf protection
Sıkça Sorulan Sorular

Bilmeniz Gereken Her Şey

Geçici e-posta ve sıfır kayıt mimarimiz hakkında bilmeniz gereken her şey.

01How does masked webhook delivery hide my origin IP?
Outbound webhook requests are routed through a Cloudflare Worker relay. The destination server sees Cloudflare edge IPs, keeping your backend server IP completely hidden.
02How do I verify the HMAC-SHA256 signature in my code?
Calculate HMAC-SHA256 of the raw request body using your secret key and compare it with the X-AliasMail-Signature header.
03Are internal subnets protected against SSRF?
Yes. The relay inspects destination URLs and blocks requests targeting localhost (127.0.0.1) and private RFC 1918 subnets (10.0.0.0/8, 192.168.0.0/16).