Can't edit documents with public IP in WOPI list

[Benjita]

NC 30.0.0
Debian 12
Apache2

App : CODE

Log : WOPI request denied from 127.0.0.1 as it does not match the configured ranges: my_public_ip

Hi all !

I am filling the WOPI list with the server’s public IP and then I can’t edit documents anymore.

The server is behing a NAT, with a router which cannot do NAT loopback so I am wondering if it could cause the issue.

I have installed BIND9 on the server so the people who are on the same network than the server can connect to it with the URL.

Should I add something in BIND so the WOPI list works ?

For the record, on another server at home, when I put my public IP in the WOPI list it’s working. But my home router can do NAT loopback. That’s why I think it could be the cause.

Any help would be appreciated, I am affraid of security concerns about WOPI.

Thank you very much.

[wwe]

I think the reason is you local DNS server which is used by NC and CODE server as well splitbraindns. using local DNS both systems know they live on the same server and connection happens “internally” showing localhost (127.0.0.1) as source address. consult Collabora integration guide for details. in this case I would recommend you adding 127.0.0.1 to the allowed list and you should be done there is no harm adding all localhost and private (rfc1918) addresses in the WOPI allow list - this addresses are not routable in the internet and can not be abused by and external attacker.

[Benjita]

Nice it works thank you very much !