Host address not allowed for remote upload
Remote URL import refused the host because DNS resolved to an address that is not safe for the server to fetch. Full text: “That host resolves to an address that is not allowed for remote upload.”
Why this happens
SSRF protection: resolved IPv4 addresses in private ranges (RFC1918), loopback, link-local, multicast, or similar are blocked. The app must not pull from internal networks or cloud metadata endpoints. IPv4 literals and blocked hostnames (localhost, *.local, …) use related “not allowed” messages.
Diagnose and fix
1. Member: use a public HTTPS file URL (normal CDN / public host), not an internal IP or intranet name.
2. From the app server: dig +short A example.com — confirm a public A record, not 10.x / 192.168.x / 127.0.0.1.
3. No admin toggle disables this guard — it is intentional security.
4. Distinct from IPv6 literal URLs not supported and no IPv4 address (AAAA-only) messages.