# Allow only localhost access

**URL:** <https://discuss.elastic.co/t/allow-only-localhost-access/11208>\
**Category:** Elasticsearch\
**Created:** [March 19, 2013, 3:22pm UTC](https://discuss.elastic.co/t/allow-only-localhost-access/11208 "2013-03-19T15:22:32Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Samuel\_Molnar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/samuel_molnar/32/2253_2.png) [@Samuel\_Molnar](https://discuss.elastic.co/u/Samuel_Molnar)\
**Post date:** [March 19, 2013, 3:22pm UTC](https://discuss.elastic.co/t/allow-only-localhost-access/11208/1 "2013-03-19T15:22:32Z")

</div>

How can allow only local requests for elasticsearch? So command like:

curl -XGET '[http://localhost:9200/twitter/\_settings](http://localhost:9200/twitter/_settings)'

can only be running on localhost and request like:

curl -XGET '[http://mydomain.com:9200/twitter/\_settings](http://mydomain.com:9200/twitter/_settings)'

would get rejected?

Because, from what i see, elasticsearch allows it by default.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [March 19, 2013, 3:25pm UTC](https://discuss.elastic.co/t/allow-only-localhost-access/11208/2 "2013-03-19T15:25:42Z")

</div>

Hey,

see [Elasticsearch Platform — Find real-time answers at scale | Elastic](http://www.elasticsearch.org/guide/reference/modules/network.html)  
check for the network.bind\_host parameter

On Tue, Mar 19, 2013 at 4:22 PM, Samuel Molnar [molnar.samuel@gmail.com](mailto:molnar.samuel@gmail.com)wrote:

> How can allow only local requests for elasticsearch? So command like:
> 
> curl -XGET '[http://localhost:9200/twitter/\_settings](http://localhost:9200/twitter/_settings)'
> 
> can only be running on localhost and request like:
> 
> curl -XGET '[http://mydomain.com:9200/twitter/\_settings](http://mydomain.com:9200/twitter/_settings)'
> 
> would get rejected?
> 
> Because, from what i see, elasticsearch allows it by default.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:45am UTC](https://discuss.elastic.co/t/allow-only-localhost-access/11208/3 "2017-07-06T02:45:45Z")

</div>