Why is Django throwing error "DisallowedHost at /"?
Include both ('www.name.com', 'ip.ip.ip.ip') Set Debug = True, then retry the IP & URL Address.
Go to the Traceback section, find the message [ raise DisallowedHost(msg) ] click -> ▼ Local vars
It will show the incoming domain name and the settings for allowed hosts:
*Variable Value
*allowed_hosts ['ip.ip.ip.ip', 'name.com']
*domain 'something.com'
*
Copy the incoming value into your settings.py. If the you see old settings restart the server\nginx
Sometimes is not enough to just add it to the host as a frustratedly tried over and over. Sometimes is stuck in cache and you're getting the same error even if you did everything right. In that case what worked for me is change the port, from 8081 and cache problem was over.
I ran it like this:
python3 manage.py runserver 127.0.0.1:8081
In your settings.py
, there is a list called ALLOWED_HOSTS
. You need to add the IP address you see in the error to that list:
ALLOWED_HOSTS = ['XX.XX.XX.XX']
Note: only add the IP address, and not the port (e.g., 127.0.0.1
and not 127.0.0.1:8000
)
Explanation:
Django checks the Host
header of the HTTP request for a url/ip address that is within the allowed hosts.
From the django website:
This is a security measure to prevent HTTP Host header attacks, which are possible even under many seemingly-safe web server configurations.
https://docs.djangoproject.com/en/dev/ref/settings/#allowed-hosts
For development, you can use the *
wildcard to allow all hosts in settings.py
:
ALLOWED_HOSTS = ['*']
Important
Modify this configuration when you deploy your app in production environment.