---
title: "MGS9008: local access only"
description: The server refused a request to a local-only route from a peer that is not on this machine's loopback interface.
tags: [MGS9008, auth, loopback, share, "403"]
---

# MGS9008: local access only

The server answered `403 forbidden` because the route only serves a caller on
this machine, and the request's peer address was not loopback.

```text
[MGS9008] this route only answers a caller on this machine's loopback interface
  see: .../MGS9008.md
```

## Why

Some routes (starting a "share to phone" session, for one) change what the
server exposes to the network. Binding to loopback is the first defense; this
check on the connection's peer address is the second, so a misconfigured bind
or a proxy cannot hand those routes to another machine.

## Resolution

Make the request from the machine the server runs on, directly to
`127.0.0.1:<port>`. A proxy or port forward in between makes the peer
non-loopback.

## What this is NOT

- **Not the Host check.** A wrong `Host` or `Origin` header is
  [MGS9007](MGS9007.md); this code is about the TCP peer.