Hi wilma and welcome to the Mattermost forums!
It could well be that localhost resolves to an IPv6 address or to an internal or public IP (depending on the content in your /etc/hosts file). Can you, just for testing purposes, allow 0.0.0.0/0 in the AllowedUntrustedInternalConnections configuration option explicitly just to see if it would work when everything is whitelisted?