Host violates local access rules about onlyoffice-nextcloud

[SergeyKorneyev]

Hi @TheColin21
Have you tried adding the 'allow_local_remote_servers' => true, line to Nextcloud's config.php? This is the most common fix for the error you're getting.

[pacohope]

I was seeing this too with my server (running Nextcloud 20.0.10). I applied the fix described in #293 and the errors went away.

[TheColin21]

I found the problem. I secured my instance via ipfiltering. The request gets sent from my clouds IPv6 address which I whitelisted but this seems to be getting ignored. The conversion works if I disable the filtering. Can I force IPv4 in my OnlyOffice or Nextcloud configuration or is there a special format to be used for IPv6 addresses?

[TheColin21]

I have. Didn't work. I switched to secret authentication a few days ago. Am 15. Dezember 2021 09:28:18 MEZ schrieb SergeyKorneyev ***@***.***>:

…

Hi @TheColin21 Have you tried adding the `'allow_local_remote_servers' => true,` line to Nextcloud's config.php? This is the most common fix for the error you're getting. -- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: #554 (comment)

[ant0nwax]

Hi I have an issue that is similar, which I started to report here:
ONLYOFFICE/DocumentServer#1659

WWW reverseproxy on CentOS 7 with apache https
OnylOffice on CentOS 8 with apache http
Nextcloud on CentOS 8 /data on NFS (TrueNAS) with nginx https

iLCJhbGciOiJIUzI1NiJ9.eyJ1c2VySWQiOiJhbnQwbiIsImZpbGVJZCI6NTA4MzEsImZpbGVQYXRoIjoiXC9Eb2N1bWVudHNcLyFGSU5BTlpFTiAoY29weSkueGxzeCIsInNoYXJlVG9rZW4iOm51bGwsImFjdGlvbiI6InRyYWNrIn0.RQhJD1908mg4rAT89MmmOtM_vrvGJIEbBrd9PDKxFB8","message":"Track: 50831 status 2 error","userAgent":"Node.js/6.13","version":"23.0.0.10","exception":{"Exception":"OCP\\Http\\Client\\LocalServerException","Message":"Host violates local access rules","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/lib/private/Http/Client/DnsPinMiddleware.php","line":136,"function":"ThrowIfLocalIp","class":"OC\\Http\\Client\\LocalAddressChecker","type":"->","args":["192.168.1.29"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/PrepareBodyMiddleware.php","line":35,"function":"OC\\Http\\Client\\{closure}","class":"OC\\Http\\Client\\DnsPinMiddleware","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":31,"function":"__invoke","class":"GuzzleHttp\\PrepareBodyMiddleware","type":"->","args":["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/RedirectMiddleware.php","line":71,"function":"GuzzleHttp\\{closure}","class":"GuzzleHttp\\Middleware","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/Middleware.php","line":63,"function":"__invoke","class":"GuzzleHttp\\RedirectMiddleware","type":"->","args":["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/HandlerStack.php","line":75,"function":"GuzzleHttp\\{closure}","class":"GuzzleHttp\\Middleware","type":"::","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":331,"function":"__invoke","class":"GuzzleHttp\\HandlerStack","type":"->","args":["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":168,"function":"transfer","class":"GuzzleHttp\\Client","type":"->","args":["*** sensitive parameter replaced ***","*** sensitive parameter replaced ***"]},{"file":"/var/www/html/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php","line":187,"function":"requestAsync","class":"GuzzleHttp\\Client","type":"->","args":["get",{"__class__":"GuzzleHttp\\Psr7\\Uri"},{"verify":"/var/www/html/nextcloud/resources/config/ca-bundle.crt","timeout":60,"allow_redirects":{"on_redirect":{"__class__":"Closure"}},"nextcloud":{"allow_local_address":false},"synchronous":true,"0":"And 6 more entries, set log level to debug to see all entries"}]},{"file":"/var/www/html/nextcloud/lib/private/Http/Client/Client.php","line":223,"function":"request","class":"GuzzleHttp\\Client","type":"->","args":["get","https://onlyoffice.DOMAINREPLACED.TLD/cache/files/465943287_3418/output.xlsx/output.xlsx?md5=YnCQbWPQyaJfTGxIz7IR7A&expires=1646289208&filename=output.xlsx",{"verify":"/var/www/html/nextcloud/resources/config/ca-bundle.crt","timeout":60,"allow_redirects":{"on_redirect":{"__class__":"Closure"}},"nextcloud":{"allow_local_address":false},"headers":{"User-Agent":"Nextcloud Server Crawler","Accept-Encoding":"gzip"},"0":"And 1 more entries, set log level to debug to see all entries"}]},{"file":"/var/www/html/nextcloud/apps/onlyoffice/lib/documentservice.php","line":364,"function":"get","class":"OC\\Http\\Client\\Client","type":"->","args":["https://onlyoffice.DOMAINREPLACED.TLD/cache/files/465943287_3418/output.xlsx/output.xlsx?md5=YnCQbWPQyaJfTGxIz7IR7A&expires=1646289208&filename=output.xlsx",{"timeout":60}]},{"file":"/var/www/html/nextcloud/apps/onlyoffice/controller/callbackcontroller.php","line":513,"function":"Request","class":"OCA\\Onlyoffice\\DocumentService","type":"->","args":["https://onlyoffice.DOMAINREPLACED.TLD/cache/files/465943287_3418/output.xlsx/output.xlsx?md5=YnCQbWPQyaJfTGxIz7IR7A&expires=1646289208&filename=output.xlsx"]},{"file":"/var/www/html/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":217,"function":"track","class":"OCA\\Onlyoffice\\Controller\\CallbackController","type":"->","args":["eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VySWQiOiJhbnQwbiIsImZpbGVJZCI6NTA4MzEsImZpbGVQYXRoIjoiXC9Eb2N1bWVudHNcLyFGSU5BTlpFTiAoY29weSkueGxzeCIsInNoYXJlVG9rZW4iOm51bGwsImFjdGlvbiI6InRyYWNrIn0.RQhJD1908mg4rAT89MmmOtM_vrvGJIEbBrd9PDKxFB8",["oc8wm0d8cdqs_USERNAMEREPLACED"],"465943287",2,"https://onlyoffice.DOMAINREPLACED.TLD/cache/files/465943287_3418/output.xlsx/output.xlsx?md5=YnCQbWPQyaJfTGxIz7IR7A&expires=1646289208&filename=output.xlsx",null,[],null,null,[{"type":0,"userid":"oc8wm0d8cdqs_USERNAMEREPLACED"}]]},{"file":"/var/www/html/nextcloud/lib/private/AppFramework/Http/Dispatcher.php","line":126,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Onlyoffice\\Controller\\CallbackController"},"track"]},{"file":"/var/www/html/nextcloud/lib/private/AppFramework/App.php","line":157,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Onlyoffice\\Controller\\CallbackController"},"track"]},{"file":"/var/www/html/nextcloud/lib/private/Route/Router.php","line":302,"function":"main","class":"OC\\AppFramework\\App","type":"::","args":["OCA\\Onlyoffice\\Controller\\CallbackController","track",{"__class__":"OC\\AppFramework\\DependencyInjection\\DIContainer"},{"_route":"onlyoffice.callback.track"}]},{"file":"/var/www/html/nextcloud/lib/base.php","line":1006,"function":"match","class":"OC\\Route\\Router","type":"->","args":["/apps/onlyoffice/track"]},{"file":"/var/www/html/nextcloud/index.php","line":36,"function":"handleRequest","class":"OC","type":"::","args":[]}],"File":"/var/www/html/nextcloud/lib/private/Http/Client/LocalAddressChecker.php","Line":42,"CustomMessage":"Track: 50831 status 2 error"}}```

from onlyoffice-nextcloud.

[Commifreak]

Hi,

I have updated from 10 -> 24 (in order) and now facing the same error but only within the preview app?

NC 24.0.1:

XML status

<?xml version="1.0"?>
<ocs>
 <meta>
  <status>ok</status>
  <statuscode>200</statuscode>
  <message>OK</message>
 </meta>
 <data>
  <nextcloud>
   <system>
    <version>24.0.1.1</version>
    <theme></theme>
    <enable_avatars>yes</enable_avatars>
    <enable_previews>yes</enable_previews>
    <memcache.local>\OC\Memcache\APCu</memcache.local>
    <memcache.distributed>none</memcache.distributed>
    <filelocking.enabled>yes</filelocking.enabled>
    <memcache.locking>\OC\Memcache\Redis</memcache.locking>
    <debug>no</debug>
    <freespace>270470131712</freespace>
    <cpuload>
     <element>0.16</element>
     <element>0.24</element>
     <element>0.24</element>
    </cpuload>
    <mem_total>16393216</mem_total>
    <mem_free>14214144</mem_free>
    <swap_total>4193280</swap_total>
    <swap_free>4193280</swap_free>
    <apps>
     <num_installed>50</num_installed>
     <num_updates_available>0</num_updates_available>
     <app_updates/>
    </apps>
   </system>
   <storage>
    <num_users>501</num_users>
    <num_files>588260</num_files>
    <num_storages>546</num_storages>
    <num_storages_local>1</num_storages_local>
    <num_storages_home>531</num_storages_home>
    <num_storages_other>16</num_storages_other>
   </storage>
   <shares>
    <num_shares>2507</num_shares>
    <num_shares_user>1177</num_shares_user>
    <num_shares_groups>0</num_shares_groups>
    <num_shares_link>435</num_shares_link>
    <num_shares_mail>601</num_shares_mail>
    <num_shares_room>115</num_shares_room>
    <num_shares_link_no_password>101</num_shares_link_no_password>
    <num_fed_shares_sent>18</num_fed_shares_sent>
    <num_fed_shares_received>10</num_fed_shares_received>
    <permissions_4_1>66</permissions_4_1>
    <permissions_3_1>27</permissions_3_1>
    <permissions_4_15>29</permissions_4_15>
    <permissions_4_3>12</permissions_4_3>
    <permissions_0_19>25</permissions_0_19>
    <permissions_0_3>363</permissions_0_3>
    <permissions_0_31>63</permissions_0_31>
    <permissions_3_15>18</permissions_3_15>
    <permissions_3_3>1</permissions_3_3>
    <permissions_0_1>20</permissions_0_1>
    <permissions_10_31>1</permissions_10_31>
    <permissions_3_31>205</permissions_3_31>
    <permissions_4_31>262</permissions_4_31>
    <permissions_3_17>139</permissions_3_17>
    <permissions_6_31>11</permissions_6_31>
    <permissions_4_17>195</permissions_4_17>
    <permissions_3_19>39</permissions_3_19>
    <permissions_3_4>6</permissions_3_4>
    <permissions_4_4>7</permissions_4_4>
    <permissions_0_15>682</permissions_0_15>
    <permissions_10_15>5</permissions_10_15>
    <permissions_10_3>109</permissions_10_3>
    <permissions_11_3>78</permissions_11_3>
    <permissions_4_19>30</permissions_4_19>
    <permissions_11_15>3</permissions_11_15>
    <permissions_11_0>78</permissions_11_0>
    <permissions_6_15>3</permissions_6_15>
    <permissions_6_19>3</permissions_6_19>
    <permissions_0_7>24</permissions_0_7>
    <permissions_6_23>1</permissions_6_23>
    <permissions_12_1>1</permissions_12_1>
    <permissions_13_1>1</permissions_13_1>
   </shares>
  </nextcloud>
  <server>
   <webserver>Apache/2.4.41</webserver>
   <php>
    <version>8.0.19</version>
    <memory_limit>536870912</memory_limit>
    <max_execution_time>3600</max_execution_time>
    <upload_max_filesize>17179869184</upload_max_filesize>
    <opcache>
     <opcache_enabled>1</opcache_enabled>
     <cache_full></cache_full>
     <restart_pending></restart_pending>
     <restart_in_progress></restart_in_progress>
     <memory_usage>
      <used_memory>74991072</used_memory>
      <free_memory>59226656</free_memory>
      <wasted_memory>0</wasted_memory>
      <current_wasted_percentage>0</current_wasted_percentage>
     </memory_usage>
     <interned_strings_usage>
      <buffer_size>6290992</buffer_size>
      <used_memory>6290976</used_memory>
      <free_memory>16</free_memory>
      <number_of_strings>108072</number_of_strings>
     </interned_strings_usage>
     <opcache_statistics>
      <num_cached_scripts>2733</num_cached_scripts>
      <num_cached_keys>5168</num_cached_keys>
      <max_cached_keys>16229</max_cached_keys>
      <hits>56512450</hits>
      <start_time>1654171071</start_time>
      <last_restart_time>0</last_restart_time>
      <oom_restarts>0</oom_restarts>
      <hash_restarts>0</hash_restarts>
      <manual_restarts>0</manual_restarts>
      <misses>2748</misses>
      <blacklist_misses>0</blacklist_misses>
      <blacklist_miss_ratio>0</blacklist_miss_ratio>
      <opcache_hit_rate>99.995137591131</opcache_hit_rate>
     </opcache_statistics>
     <jit>
      <enabled></enabled>
      <on></on>
      <kind>5</kind>
      <opt_level>4</opt_level>
      <opt_flags>6</opt_flags>
      <buffer_size>0</buffer_size>
      <buffer_free>0</buffer_free>
     </jit>
    </opcache>
    <apcu>
     <cache>
      <num_slots>4099</num_slots>
      <ttl>0</ttl>
      <num_hits>4880855</num_hits>
      <num_misses>60332</num_misses>
      <num_inserts>96559</num_inserts>
      <num_entries>5556</num_entries>
      <expunges>0</expunges>
      <start_time>1654171071</start_time>
      <mem_size>2008872</mem_size>
      <memory_type>mmap</memory_type>
     </cache>
     <sma>
      <num_seg>1</num_seg>
      <seg_size>33554312</seg_size>
      <avail_mem>31282216</avail_mem>
     </sma>
    </apcu>
    <extensions>
     <element>Core</element>
     <element>date</element>
     <element>libxml</element>
     <element>openssl</element>
     <element>pcre</element>
     <element>zlib</element>
     <element>filter</element>
     <element>hash</element>
     <element>json</element>
     <element>Reflection</element>
     <element>SPL</element>
     <element>session</element>
     <element>standard</element>
     <element>sodium</element>
     <element>cgi-fcgi</element>
     <element>mysqlnd</element>
     <element>PDO</element>
     <element>xml</element>
     <element>apcu</element>
     <element>bcmath</element>
     <element>bz2</element>
     <element>calendar</element>
     <element>ctype</element>
     <element>curl</element>
     <element>dom</element>
     <element>mbstring</element>
     <element>FFI</element>
     <element>fileinfo</element>
     <element>ftp</element>
     <element>gd</element>
     <element>gettext</element>
     <element>gmp</element>
     <element>iconv</element>
     <element>igbinary</element>
     <element>imagick</element>
     <element>intl</element>
     <element>ldap</element>
     <element>exif</element>
     <element>mysqli</element>
     <element>pdo_mysql</element>
     <element>Phar</element>
     <element>posix</element>
     <element>readline</element>
     <element>redis</element>
     <element>shmop</element>
     <element>SimpleXML</element>
     <element>sockets</element>
     <element>sysvmsg</element>
     <element>sysvsem</element>
     <element>sysvshm</element>
     <element>tokenizer</element>
     <element>xmlreader</element>
     <element>xmlwriter</element>
     <element>xsl</element>
     <element>zip</element>
     <element>Zend OPcache</element>
    </extensions>
   </php>
   <database>
    <type>mysql</type>
    <version>8.0.29</version>
    <size>620142592</size>
   </database>
  </server>
  <activeUsers>
   <last5minutes>48</last5minutes>
   <last1hour>51</last1hour>
   <last24hours>81</last24hours>
  </activeUsers>
 </data>
</ocs>

The log entry:

{
   "reqId":"Ad2juo2OnFy4Y7lKhwpk",
   "level":2,
   "time":"2022-06-03T08:03:49+00:00",
   "remoteAddr":"192.168.0.192",
   "user":"ID",
   "app":"no app in context",
   "method":"GET",
   "url":"/index.php/apps/files_versions/preview?file=xxx.docx&version=1653392980",
   "message":"Host 192.168.205.20 was not connected to because it violates local access rules",
   "userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.63 Safari/537.36",
   "version":"24.0.1.1"
}

or:

{
   "reqId":"AIYYpVl41usbGnZYN8C6",
   "level":2,
   "time":"2022-06-03T08:04:53+00:00",
   "remoteAddr":"172.31.30.142",
   "user":"ID",
   "app":"no app in context",
   "method":"GET",
   "url":"/index.php/core/preview?fileId=1658598&x=250&y=250",
   "message":"Host 192.168.205.20 was not connected to because it violates local access rules",
   "userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0",
   "version":"24.0.1.1"
}

And this floods my log :(

192.168.205.20 is my collabora server!

config snips:

  'trusted_domains' => 
  array (
    0 => 'nextcloud.mydomain.de',
  ),

// ....
  'proxyexclude' => 
  array (
    0 => '192.168.205.20', // collabora server ip
    1 => 'collabora.server.de',
  ),

from onlyoffice-nextcloud.