# Webhook payload URL doesn't accept internal IP based value

**URL:** https://meta.discourse.org/t/webhook-payload-url-doesnt-accept-internal-ip-based-value/247762
**Category:** Feature
**Created:** [December 5, 2022, 9:33am UTC](https://meta.discourse.org/t/webhook-payload-url-doesnt-accept-internal-ip-based-value/247762 "2022-12-05T09:33:30Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![dpb](https://avatars.discourse-cdn.com/v4/letter/d/e99b99/32.png) [@dpb](https://meta.discourse.org/u/dpb)
#### Post date: [February 10, 2023, 2:06pm UTC](https://meta.discourse.org/t/webhook-payload-url-doesnt-accept-internal-ip-based-value/247762/6 "2023-02-10T14:06:44Z")

</div>

I found a setting that allows to unblock specific internal hosts and is respected by the SSRF Protection mechanism that is causing the WebHooks to be blocked in the first place:

Use the setting `allowed_internal_hosts` to specify which internal hostnames are allowed in your webhook.

---

_[View the full topic](https://meta.discourse.org/t/webhook-payload-url-doesnt-accept-internal-ip-based-value/247762)._