Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

Did not solve problem.
They pointed me to this fix.

http://stackoverflow.com/questions/15238506/djangos-suspiciousoperation-invalid-http-host-header/19534738#19534738

Just wanted to share.

On Wednesday, October 21, 2015 at 8:08:55 PM UTC-4, frocco wrote:
>
> I spoke with webfaction and they advised I change apache2 config to Listen 
> 127.0.0.1:29627 instead of Listen 29627
>
> On Monday, September 21, 2015 at 7:46:49 PM UTC-4, frocco wrote:
>>
>> I am using webfaction and django 1.5
>>
>> Is this something webfaction and resolve?
>>
>> On Monday, September 21, 2015 at 6:26:40 PM UTC-4, Carl Meyer wrote:
>>>
>>> On 09/21/2015 04:22 PM, François Schiettecatte wrote: 
>>> > Not likely, all that is happening is that you are getting requests 
>>> > where the ‘Host:’ HTTP header is not set or set to something other 
>>> > than what is accepted by your site. Most likely a buggy client. I get 
>>> > that all the time, I just ignore it. 
>>> > 
>>> > Cheers 
>>> > 
>>> > François 
>>> > 
>>> >> On Sep 21, 2015, at 6:16 PM, frocco  wrote: 
>>> >> 
>>> >> I am still getting this invalid host from time to time. Does this 
>>> >> mean that someone is trying to hack my site? 
>>> >> 
>>> >> www.g3suprimentos.com.br is not anything I own. 
>>> >> 
>>> >> For now, I am just ignoring this. 
>>>
>>> The best way to solve this for good and never get those errors again is 
>>> to fix it in your front-end webserver configuration, so that it ignores 
>>> requests for the wrong Host and doesn't even pass them on to Django in 
>>> the first place. If you're using nginx that means setting your 
>>> `server_name` directive correctly. If you're using Apache that means 
>>> using a name-based (non-default) VirtualHost. Any webserver should 
>>> provide some way to do this. 
>>>
>>> Carl 
>>>
>>>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/e90bc6ac-b591-46ed-9d37-f28728001c19%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

I spoke with webfaction and they advised I change apache2 config to Listen 
127.0.0.1:29627 instead of Listen 29627

On Monday, September 21, 2015 at 7:46:49 PM UTC-4, frocco wrote:
>
> I am using webfaction and django 1.5
>
> Is this something webfaction and resolve?
>
> On Monday, September 21, 2015 at 6:26:40 PM UTC-4, Carl Meyer wrote:
>>
>> On 09/21/2015 04:22 PM, François Schiettecatte wrote: 
>> > Not likely, all that is happening is that you are getting requests 
>> > where the ‘Host:’ HTTP header is not set or set to something other 
>> > than what is accepted by your site. Most likely a buggy client. I get 
>> > that all the time, I just ignore it. 
>> > 
>> > Cheers 
>> > 
>> > François 
>> > 
>> >> On Sep 21, 2015, at 6:16 PM, frocco  wrote: 
>> >> 
>> >> I am still getting this invalid host from time to time. Does this 
>> >> mean that someone is trying to hack my site? 
>> >> 
>> >> www.g3suprimentos.com.br is not anything I own. 
>> >> 
>> >> For now, I am just ignoring this. 
>>
>> The best way to solve this for good and never get those errors again is 
>> to fix it in your front-end webserver configuration, so that it ignores 
>> requests for the wrong Host and doesn't even pass them on to Django in 
>> the first place. If you're using nginx that means setting your 
>> `server_name` directive correctly. If you're using Apache that means 
>> using a name-based (non-default) VirtualHost. Any webserver should 
>> provide some way to do this. 
>>
>> Carl 
>>
>>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/4247de74-69b3-4ca3-a425-2119de64f83b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

I am using webfaction and django 1.5

Is this something webfaction and resolve?

On Monday, September 21, 2015 at 6:26:40 PM UTC-4, Carl Meyer wrote:
>
> On 09/21/2015 04:22 PM, François Schiettecatte wrote: 
> > Not likely, all that is happening is that you are getting requests 
> > where the ‘Host:’ HTTP header is not set or set to something other 
> > than what is accepted by your site. Most likely a buggy client. I get 
> > that all the time, I just ignore it. 
> > 
> > Cheers 
> > 
> > François 
> > 
> >> On Sep 21, 2015, at 6:16 PM, frocco > 
> wrote: 
> >> 
> >> I am still getting this invalid host from time to time. Does this 
> >> mean that someone is trying to hack my site? 
> >> 
> >> www.g3suprimentos.com.br is not anything I own. 
> >> 
> >> For now, I am just ignoring this. 
>
> The best way to solve this for good and never get those errors again is 
> to fix it in your front-end webserver configuration, so that it ignores 
> requests for the wrong Host and doesn't even pass them on to Django in 
> the first place. If you're using nginx that means setting your 
> `server_name` directive correctly. If you're using Apache that means 
> using a name-based (non-default) VirtualHost. Any webserver should 
> provide some way to do this. 
>
> Carl 
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/465fefdd-cf2e-42cf-a050-e2ac09d4fb87%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Carl Meyer]

On 09/21/2015 04:22 PM, François Schiettecatte wrote:
> Not likely, all that is happening is that you are getting requests
> where the ‘Host:’ HTTP header is not set or set to something other
> than what is accepted by your site. Most likely a buggy client. I get
> that all the time, I just ignore it.
> 
> Cheers
> 
> François
> 
>> On Sep 21, 2015, at 6:16 PM, frocco  wrote:
>> 
>> I am still getting this invalid host from time to time. Does this
>> mean that someone is trying to hack my site?
>> 
>> www.g3suprimentos.com.br is not anything I own.
>> 
>> For now, I am just ignoring this.

The best way to solve this for good and never get those errors again is
to fix it in your front-end webserver configuration, so that it ignores
requests for the wrong Host and doesn't even pass them on to Django in
the first place. If you're using nginx that means setting your
`server_name` directive correctly. If you're using Apache that means
using a name-based (non-default) VirtualHost. Any webserver should
provide some way to do this.

Carl

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/56008402.70309%40oddbird.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[François Schiettecatte]

Not likely, all that is happening is that you are getting requests where the 
‘Host:’ HTTP header is not set or set to something other than what is accepted 
by your site. Most likely a buggy client. I get that all the time, I just 
ignore it.

Cheers

François

> On Sep 21, 2015, at 6:16 PM, frocco  wrote:
> 
> I am still getting this invalid host from time to time.
> Does this mean that someone is trying to hack my site?
> 
> www.g3suprimentos.com.br is not anything I own.
> 
> For now, I am just ignoring this.
> 
> Thanks
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/django-users/a2cac09b-ae37-4b95-a72f-c80c47f24654%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/82A273A0-5121-4257-8BC7-9E0BEB039FD5%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

I am still getting this invalid host from time to time.
Does this mean that someone is trying to hack my site?

www.g3suprimentos.com.br is not anything I own.

For now, I am just ignoring this.

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/a2cac09b-ae37-4b95-a72f-c80c47f24654%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Carl Meyer]

> On May 16, 2015, at 8:12 AM, Gerald Klein  wrote:
> 
> This looks like a cross domain request that is being received by your site 
> and the requestor is not listed in your sites allowed sites list, Sites 
> conforming with CORS will have a list of sites that can request data via http 
> from them, this is stating the requestor  is not on the list

No, this is not related to the problem. Django's ALLOWED_HOSTS setting has 
nothing to do with CORS or the domain the request is coming from, it's about 
the server's domain(s) and the Host header in the request. 

Carl

> Hope that helps
> 
>> On Sat, May 16, 2015 at 8:49 AM, bobhaugen  wrote:
>> I've gotten this error now and then when I have updated the software on a 
>> webfaction-hosted site and restarted Apache. Then it goes away after maybe a 
>> couple more restarts. It's like the software has not quite gotten itself 
>> together yet. I have no idea why this should be, and since it goes away, I 
>> have not opened a ticket on webfaction. 
>> 
>>> On Wednesday, May 13, 2015 at 5:45:43 PM UTC-5, Russell Keith-Magee wrote:
>>> 
>>> Is there a setting to turn of a warning that someone is attempting to 
>>> access your site in a potentially malicious way? No.
>>> 
>>> When you get a warning like this, you investigate the cause, and fix the 
>>> problem. You don't just silence the warning.
>>> 
>>> Yours,
>>> Russ Magee %-)
>>> 
 On Thu, May 14, 2015 at 3:44 AM, frocco  wrote:
 Thanks for getting back to me.
 I am on django 1.5. Is there a setting I can use to avoid getting these 
 emails?
 I get at least 5 a week.
 
 
 
> On Tuesday, March 17, 2015 at 6:58:00 PM UTC-4, Russell Keith-Magee wrote:
> Hi,
> 
> It's possible that you're getting this error for the exact reason that 
> the check was added - someone is submitting requests to your site with a 
> manipulated HTTP_HOST header. This may not be malicious - it could just 
> be a badly configured robot making web requests.
> 
> It might also point at a problem with your hosting provider - especially 
> if you're sharing an IP address with g3suprimentos.com.br, or if 
> g3suprimentos.com.br once had the same IP that you're currently using. 
> 
> Without more details, it's hard to say for certain. But is someone trying 
> to hack your site? Almost certainly not. If you were being hacked, you 
> wouldn't have described the problem as "I see this error from time to 
> time" - you would have said "I just received a thousand of these in the 
> last 10 minutes". Attackers aren't noted for their subtlety - they will 
> generally try every possible backdoor and exploit that they know of, all 
> at once. 
> 
> Yours,
> Russ Magee %-)
> 
>> On Tue, Mar 17, 2015 at 11:45 PM, frocco  wrote:
>> I am concerned because I have a value in ALLOWED_HOSTS, but it is not 
>> this value.
>> 
>> 
>>> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>>> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
>>> ALLOWED_HOSTS): www.g3suprimentos.com.br
>>> 
>>> I keep getting this error from time to time.
>>> 
>>> Is someone trying to hack my site?
>>> 
>>> Thanks
>> 
>> -- 
>> You received this message because you are subscribed to the Google 
>> Groups "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send 
>> an email to django-users...@googlegroups.com.
>> To post to this group, send email to django...@googlegroups.com.
>> Visit this group at http://groups.google.com/group/django-users.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com.
>> 
>> For more options, visit https://groups.google.com/d/optout.
> 
 
 -- 
 You received this message because you are subscribed to the Google Groups 
 "Django users" group.
 To unsubscribe from this group and stop receiving emails from it, send an 
 email to django-users...@googlegroups.com.
 To post to this group, send email to django...@googlegroups.com.
 Visit this group at http://groups.google.com/group/django-users.
 To view this discussion on the web visit 
 https://groups.google.com/d/msgid/django-users/ab908cd5-8c5b-4d6e-9033-80fca60415f7%40googlegroups.com.
 
 For more options, visit https://groups.google.com/d/optout.
>>> 
>> 
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to django-users+unsubscr...@googlegroups.com.
>> To post to this group, send email to django-users@googlegroups.com.
>> Visit this group at http://groups.google.com/group/django-users.
>> To view this discussion on the web vi

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Gerald Klein]

This looks like a cross domain request that is being received by your site
and the requestor is not listed in your sites allowed sites list, Sites
conforming with CORS will have a list of sites that can request data via
http from them, this is stating the requestor  is not on the list

Hope that helps

On Sat, May 16, 2015 at 8:49 AM, bobhaugen  wrote:

> I've gotten this error now and then when I have updated the software on a
> webfaction-hosted site and restarted Apache. Then it goes away after maybe
> a couple more restarts. It's like the software has not quite gotten itself
> together yet. I have no idea why this should be, and since it goes away, I
> have not opened a ticket on webfaction.
>
> On Wednesday, May 13, 2015 at 5:45:43 PM UTC-5, Russell Keith-Magee wrote:
>>
>>
>> Is there a setting to turn of a warning that someone is attempting to
>> access your site in a potentially malicious way? No.
>>
>> When you get a warning like this, you investigate the cause, and fix the
>> problem. You don't just silence the warning.
>>
>> Yours,
>> Russ Magee %-)
>>
>> On Thu, May 14, 2015 at 3:44 AM, frocco  wrote:
>>
>>> Thanks for getting back to me.
>>> I am on django 1.5. Is there a setting I can use to avoid getting these
>>> emails?
>>> I get at least 5 a week.
>>>
>>>
>>>
>>> On Tuesday, March 17, 2015 at 6:58:00 PM UTC-4, Russell Keith-Magee
>>> wrote:

 Hi,

 It's possible that you're getting this error for the exact reason that
 the check was added - someone is submitting requests to your site with a
 manipulated HTTP_HOST header. This may not be malicious - it could just be
 a badly configured robot making web requests.

 It might also point at a problem with your hosting provider -
 especially if you're sharing an IP address with g3suprimentos.com.br,
 or if g3suprimentos.com.br once had the same IP that you're currently
 using.

 Without more details, it's hard to say for certain. But is someone
 trying to hack your site? Almost certainly not. If you were being hacked,
 you wouldn't have described the problem as "I see this error from time to
 time" - you would have said "I just received a thousand of these in the
 last 10 minutes". Attackers aren't noted for their subtlety - they will
 generally try every possible backdoor and exploit that they know of, all at
 once.

 Yours,
 Russ Magee %-)

 On Tue, Mar 17, 2015 at 11:45 PM, frocco  wrote:

> I am concerned because I have a value in ALLOWED_HOSTS, but it is not
> this value.
>
>
> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>>
>> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set
>> ALLOWED_HOSTS): www.g3suprimentos.com.br
>>
>> I keep getting this error from time to time.
>>
>> Is someone trying to hack my site?
>>
>> Thanks
>>
>  --
> You received this message because you are subscribed to the Google
> Groups "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to django-users...@googlegroups.com.
> To post to this group, send email to django...@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

  --
>>> You received this message because you are subscribed to the Google
>>> Groups "Django users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to django-users...@googlegroups.com.
>>> To post to this group, send email to django...@googlegroups.com.
>>> Visit this group at http://groups.google.com/group/django-users.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/django-users/ab908cd5-8c5b-4d6e-9033-80fca60415f7%40googlegroups.com
>>> 
>>> .
>>>
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>  --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/49950182-ac4b-46d8-a277-b265407edfb4%40googlegroups.com
> 

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[bobhaugen]

I've gotten this error now and then when I have updated the software on a 
webfaction-hosted site and restarted Apache. Then it goes away after maybe 
a couple more restarts. It's like the software has not quite gotten itself 
together yet. I have no idea why this should be, and since it goes away, I 
have not opened a ticket on webfaction. 

On Wednesday, May 13, 2015 at 5:45:43 PM UTC-5, Russell Keith-Magee wrote:
>
>
> Is there a setting to turn of a warning that someone is attempting to 
> access your site in a potentially malicious way? No.
>
> When you get a warning like this, you investigate the cause, and fix the 
> problem. You don't just silence the warning.
>
> Yours,
> Russ Magee %-)
>
> On Thu, May 14, 2015 at 3:44 AM, frocco > 
> wrote:
>
>> Thanks for getting back to me.
>> I am on django 1.5. Is there a setting I can use to avoid getting these 
>> emails?
>> I get at least 5 a week.
>>
>>
>>
>> On Tuesday, March 17, 2015 at 6:58:00 PM UTC-4, Russell Keith-Magee wrote:
>>>
>>> Hi,
>>>
>>> It's possible that you're getting this error for the exact reason that 
>>> the check was added - someone is submitting requests to your site with a 
>>> manipulated HTTP_HOST header. This may not be malicious - it could just be 
>>> a badly configured robot making web requests.
>>>
>>> It might also point at a problem with your hosting provider - especially 
>>> if you're sharing an IP address with g3suprimentos.com.br, or if 
>>> g3suprimentos.com.br once had the same IP that you're currently using. 
>>>
>>> Without more details, it's hard to say for certain. But is someone 
>>> trying to hack your site? Almost certainly not. If you were being hacked, 
>>> you wouldn't have described the problem as "I see this error from time to 
>>> time" - you would have said "I just received a thousand of these in the 
>>> last 10 minutes". Attackers aren't noted for their subtlety - they will 
>>> generally try every possible backdoor and exploit that they know of, all at 
>>> once. 
>>>
>>> Yours,
>>> Russ Magee %-)
>>>
>>> On Tue, Mar 17, 2015 at 11:45 PM, frocco  wrote:
>>>
 I am concerned because I have a value in ALLOWED_HOSTS, but it is not 
 this value.


 On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>
> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
> ALLOWED_HOSTS): www.g3suprimentos.com.br
>
> I keep getting this error from time to time.
>
> Is someone trying to hack my site?
>
> Thanks
>
  -- 
 You received this message because you are subscribed to the Google 
 Groups "Django users" group.
 To unsubscribe from this group and stop receiving emails from it, send 
 an email to django-users...@googlegroups.com.
 To post to this group, send email to django...@googlegroups.com.
 Visit this group at http://groups.google.com/group/django-users.
 To view this discussion on the web visit 
 https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com
  
 
 .

 For more options, visit https://groups.google.com/d/optout.

>>>
>>>  -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to django-users...@googlegroups.com .
>> To post to this group, send email to django...@googlegroups.com 
>> .
>> Visit this group at http://groups.google.com/group/django-users.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/django-users/ab908cd5-8c5b-4d6e-9033-80fca60415f7%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/49950182-ac4b-46d8-a277-b265407edfb4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Carl Meyer]

On 05/15/2015 09:14 AM, Andreas Kuhne wrote:
> You are getting it because someone has come to your server by
> entering www.g3suprimentos.com.br  in
> a browser. If you don't have that address in the allowed hosts setting,
> you will get the error you have received. 

Correct.

> If you don't want your server to show something
> for www.g3suprimentos.com.br , then
> the problem is not on your end, but rather the clients (it can be an
> incorrect DNS entry, or that someone has edited their hosts file). So
> you can't do anything to fix it.

Not true - in most cases you can fix it on the server side, but the
details depend on your server configuration. You need to configure
whatever front-end server is listening for the web requests to ignore
any requests coming in for a host name that you don't want your server
to respond to. If you're using Apache, this meand making sure that your
Django site is running in a name-based virtualhost (and not the default
one). If you're using nginx, it just means setting the server_name of
the server block to the hostname(s) you actually want to serve. Etc.

Carl

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/5556116D.5090806%40oddbird.net.
For more options, visit https://groups.google.com/d/optout.


signature.asc
Description: OpenPGP digital signature

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[François Schiettecatte]

There is nothing to debug, Django is just telling you that it is getting an 
invalid request where the ‘Host:’ header does not match the host name the 
application is expecting. Django will reject such requests and warn you about 
them:

https://docs.djangoproject.com/en/1.8/ref/settings/#allowed-hosts

François

> On May 15, 2015, at 11:10 AM, frocco  wrote:
> 
> The problem is I do not know how to debug this issue.
> 
> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
> ALLOWED_HOSTS): www.g3suprimentos.com.br
> 
> I keep getting this error from time to time.
> 
> Is someone trying to hack my site?
> 
> Thanks
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/django-users/e148d1ef-de61-418a-a821-d52dd81e5591%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/F7C2CF63-2672-4366-8FA5-4E546950C054%40gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Andreas Kuhne]

You are getting it because someone has come to your server by entering
www.g3suprimentos.com.br in a browser. If you don't have that address in
the allowed hosts setting, you will get the error you have received.

If you don't want your server to show something for www.g3suprimentos.com.br,
then the problem is not on your end, but rather the clients (it can be an
incorrect DNS entry, or that someone has edited their hosts file). So you
can't do anything to fix it.

Regards,

Andréas



2015-05-15 17:10 GMT+02:00 frocco :

> The problem is I do not know how to debug this issue.
>
> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>>
>> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set
>> ALLOWED_HOSTS): www.g3suprimentos.com.br
>>
>> I keep getting this error from time to time.
>>
>> Is someone trying to hack my site?
>>
>> Thanks
>>
>  --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/e148d1ef-de61-418a-a821-d52dd81e5591%40googlegroups.com
> 
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CALXYUb%3Df1M%3DYALLhqupKkiZ550XZDg%3DVna3HN1L1pxQ%2B%3D-wpMw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

The problem is I do not know how to debug this issue.

On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>
> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
> ALLOWED_HOSTS): www.g3suprimentos.com.br
>
> I keep getting this error from time to time.
>
> Is someone trying to hack my site?
>
> Thanks
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/e148d1ef-de61-418a-a821-d52dd81e5591%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Russell Keith-Magee]

Is there a setting to turn of a warning that someone is attempting to
access your site in a potentially malicious way? No.

When you get a warning like this, you investigate the cause, and fix the
problem. You don't just silence the warning.

Yours,
Russ Magee %-)

On Thu, May 14, 2015 at 3:44 AM, frocco  wrote:

> Thanks for getting back to me.
> I am on django 1.5. Is there a setting I can use to avoid getting these
> emails?
> I get at least 5 a week.
>
>
>
> On Tuesday, March 17, 2015 at 6:58:00 PM UTC-4, Russell Keith-Magee wrote:
>>
>> Hi,
>>
>> It's possible that you're getting this error for the exact reason that
>> the check was added - someone is submitting requests to your site with a
>> manipulated HTTP_HOST header. This may not be malicious - it could just be
>> a badly configured robot making web requests.
>>
>> It might also point at a problem with your hosting provider - especially
>> if you're sharing an IP address with g3suprimentos.com.br, or if
>> g3suprimentos.com.br once had the same IP that you're currently using.
>>
>> Without more details, it's hard to say for certain. But is someone trying
>> to hack your site? Almost certainly not. If you were being hacked, you
>> wouldn't have described the problem as "I see this error from time to time"
>> - you would have said "I just received a thousand of these in the last 10
>> minutes". Attackers aren't noted for their subtlety - they will generally
>> try every possible backdoor and exploit that they know of, all at once.
>>
>> Yours,
>> Russ Magee %-)
>>
>> On Tue, Mar 17, 2015 at 11:45 PM, frocco  wrote:
>>
>>> I am concerned because I have a value in ALLOWED_HOSTS, but it is not
>>> this value.
>>>
>>>
>>> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:

 SuspiciousOperation: Invalid HTTP_HOST header (you may need to set
 ALLOWED_HOSTS): www.g3suprimentos.com.br

 I keep getting this error from time to time.

 Is someone trying to hack my site?

 Thanks

>>>  --
>>> You received this message because you are subscribed to the Google
>>> Groups "Django users" group.
>>> To unsubscribe from this group and stop receiving emails from it, send
>>> an email to django-users...@googlegroups.com.
>>> To post to this group, send email to django...@googlegroups.com.
>>> Visit this group at http://groups.google.com/group/django-users.
>>> To view this discussion on the web visit
>>> https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com
>>> 
>>> .
>>>
>>> For more options, visit https://groups.google.com/d/optout.
>>>
>>
>>  --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/ab908cd5-8c5b-4d6e-9033-80fca60415f7%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAJxq84-iGOycH2zn2T9mCLUuTmSOyHdquFHp9Duj39xqZ03dag%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

Thanks for getting back to me.
I am on django 1.5. Is there a setting I can use to avoid getting these 
emails?
I get at least 5 a week.



On Tuesday, March 17, 2015 at 6:58:00 PM UTC-4, Russell Keith-Magee wrote:
>
> Hi,
>
> It's possible that you're getting this error for the exact reason that the 
> check was added - someone is submitting requests to your site with a 
> manipulated HTTP_HOST header. This may not be malicious - it could just be 
> a badly configured robot making web requests.
>
> It might also point at a problem with your hosting provider - especially 
> if you're sharing an IP address with g3suprimentos.com.br, or if 
> g3suprimentos.com.br once had the same IP that you're currently using. 
>
> Without more details, it's hard to say for certain. But is someone trying 
> to hack your site? Almost certainly not. If you were being hacked, you 
> wouldn't have described the problem as "I see this error from time to time" 
> - you would have said "I just received a thousand of these in the last 10 
> minutes". Attackers aren't noted for their subtlety - they will generally 
> try every possible backdoor and exploit that they know of, all at once. 
>
> Yours,
> Russ Magee %-)
>
> On Tue, Mar 17, 2015 at 11:45 PM, frocco > 
> wrote:
>
>> I am concerned because I have a value in ALLOWED_HOSTS, but it is not 
>> this value.
>>
>>
>> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>>>
>>> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
>>> ALLOWED_HOSTS): www.g3suprimentos.com.br
>>>
>>> I keep getting this error from time to time.
>>>
>>> Is someone trying to hack my site?
>>>
>>> Thanks
>>>
>>  -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to django-users...@googlegroups.com .
>> To post to this group, send email to django...@googlegroups.com 
>> .
>> Visit this group at http://groups.google.com/group/django-users.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com
>>  
>> 
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/ab908cd5-8c5b-4d6e-9033-80fca60415f7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Russell Keith-Magee]

Hi,

It's possible that you're getting this error for the exact reason that the
check was added - someone is submitting requests to your site with a
manipulated HTTP_HOST header. This may not be malicious - it could just be
a badly configured robot making web requests.

It might also point at a problem with your hosting provider - especially if
you're sharing an IP address with g3suprimentos.com.br, or if
g3suprimentos.com.br once had the same IP that you're currently using.

Without more details, it's hard to say for certain. But is someone trying
to hack your site? Almost certainly not. If you were being hacked, you
wouldn't have described the problem as "I see this error from time to time"
- you would have said "I just received a thousand of these in the last 10
minutes". Attackers aren't noted for their subtlety - they will generally
try every possible backdoor and exploit that they know of, all at once.

Yours,
Russ Magee %-)

On Tue, Mar 17, 2015 at 11:45 PM, frocco  wrote:

> I am concerned because I have a value in ALLOWED_HOSTS, but it is not this
> value.
>
>
> On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>>
>> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set
>> ALLOWED_HOSTS): www.g3suprimentos.com.br
>>
>> I keep getting this error from time to time.
>>
>> Is someone trying to hack my site?
>>
>> Thanks
>>
>  --
> You received this message because you are subscribed to the Google Groups
> "Django users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to django-users+unsubscr...@googlegroups.com.
> To post to this group, send email to django-users@googlegroups.com.
> Visit this group at http://groups.google.com/group/django-users.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com
> 
> .
>
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/CAJxq849VOSnDfv3WCQhBtHTC41ANiLPR9C3TenYub3yh4Nxf2g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

I am concerned because I have a value in ALLOWED_HOSTS, but it is not this 
value.


On Tuesday, March 17, 2015 at 9:17:15 AM UTC-4, frocco wrote:
>
> SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
> ALLOWED_HOSTS): www.g3suprimentos.com.br
>
> I keep getting this error from time to time.
>
> Is someone trying to hack my site?
>
> Thanks
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/5550dde0-4230-4068-a8b5-196f0bd844fc%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Re: Invalid HTTP_HOST, can someone explain why I am getting this?

[Eric Davis]

What is the value of ALLOWED_HOSTS in settings.py?

Your site is serving requests that contain a "Host: 
www.g3suprimentos.com.br" header. Django 
doesn't recognize this as an allowed host, hence the error.

https://docs.djangoproject.com/en/1.7/ref/settings/#allowed-hosts has more.

Eric Davis
Email: eda...@eresources.com
Skype: edavis215

On Mar 17, 2015, at 6:17 AM, frocco 
mailto:faro...@gmail.com>> wrote:

SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
ALLOWED_HOSTS): www.g3suprimentos.com.br

I keep getting this error from time to time.

Is someone trying to hack my site?

Thanks

--
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to 
django-users+unsubscr...@googlegroups.com.
To post to this group, send email to 
django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/1aa55c70-e51b-44f0-aae6-d1ca3e666467%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/0A0A953B-A33B-4148-88A1-83FB706AEB40%40eresources.com.
For more options, visit https://groups.google.com/d/optout.

Invalid HTTP_HOST, can someone explain why I am getting this?

[frocco]

SuspiciousOperation: Invalid HTTP_HOST header (you may need to set 
ALLOWED_HOSTS): www.g3suprimentos.com.br

I keep getting this error from time to time.

Is someone trying to hack my site?

Thanks

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/1aa55c70-e51b-44f0-aae6-d1ca3e666467%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.