Hi Jared thank you for the link, but I think that my situation is different. Django (not the server) is issuing an error. It seems, from the stackoverflow link below, that it may be someone probing the site for the vulnerability by spoofing the header. Up to django < 1.7b4 this is considered a 500 error (internal server error), and that's why it's notified. From django 1.7b4 it's a 400 error, so it won't trigger any notification.
This is at least my understanding as a newbie. Read the links below to have all the information 2014-05-27 0:23 GMT+02:00 Jared Nielsen <[email protected]>: > Hi Federico, > If you're using NGINX you can add a rewrite to your sites .conf file. > > http://jarednielsen.com/blog/how-to-configure-server-name-redirect-in-nginx/ > I was receiving the same error (and an inbox full of Django notices) but > fixed it with the solution linked above. > Cheers. > > > On Monday, May 26, 2014 5:34:23 AM UTC-6, Federico Bruni wrote: >> >> I've been getting this error message since I've deployed my mezzanine >> website: >> [Django] ERROR: Invalid HTTP_HOST header: 'domain.com'.You may need to >> add u'domain.com' to ALLOWED_HOSTS >> >> where domain.com is most of the times the IP of the server, few times a >> secondary domain which redirects to the main one and one time www.fbi.gov:-) >> >> I've read the pages below, so I think that I can just ignore the error >> (I'm sure that my ALLOWED_HOSTS is restrictive). >> I guess that I can wait for Django >= 1.7b4 in Mezzanine and then I won't >> get any error message. Right? >> >> http://stackoverflow.com/questions/15238506/djangos- >> suspiciousoperation-invalid-http-host-header >> https://code.djangoproject.com/ticket/19866 >> https://github.com/django/django/commit/d228c1192ed59ab0114d9eba82ac99 >> df611652d2 (added in django 1.7b4) >> >> -- > You received this message because you are subscribed to a topic in the > Google Groups "Mezzanine Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/mezzanine-users/NvuIO0occpw/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Mezzanine Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
