# Public IP Addresses for Firewall

**URL:** <https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670>\
**Category:** Notehub.io\
**Created:** [September 18, 2023, 7:27am UTC](https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670 "2023-09-18T07:27:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![spring](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@spring](https://discuss.blues.com/u/spring)\
**Post date:** [September 18, 2023, 7:27am UTC](https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670/1 "2023-09-18T07:27:47Z")

</div>

I have custom software that receives the data in a route from Notehub. To improve the security I would like to add firewall rules that would only allow traffic from Notehub, do you have a list of your public IP addresses for this purpose? I did look, but couldn’t find anything.

Thanks

---

<div class="post-metadata">

**Author:** ![jcsalem](https://avatars.discourse-cdn.com/v4/letter/j/848f3c/32.png) [@jcsalem](https://discuss.blues.com/u/jcsalem)\
**Post date:** [September 18, 2023, 4:59pm UTC](https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670/2 "2023-09-18T16:59:52Z")

</div>

Hi spring,

Currently, we can’t provide a definitive list of IPs or IP ranges for our outgoing routed events. Our IP addresses change from time-to-time given our scalable architecture that is hosted in multiple data centers.

We do understand that some customers want to use IP whitelisting as part of their authentication strategy. Thus we are considering providing an endpoint that returns the currently active list of IP addresses.

IP whitelisting is vulnerable to man-in-the-middle attacks and spoofing.

Given that, I strongly recommend that you use HTTPS/TLS encryption plus token or HTTP BasicAuth authentication whether or not you’re able to take advantage of IP whitelisting.

---

<div class="post-metadata">

**Author:** ![spring](https://avatars.discourse-cdn.com/v4/letter/s/ee59a6/32.png) [@spring](https://discuss.blues.com/u/spring)\
**Post date:** [September 19, 2023, 7:36am UTC](https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670/3 "2023-09-19T07:36:52Z")

</div>

It would be good if you could provide an endpoint. I already have string encryption and authentication on the data, I mainly wanted to cut down on the constant scanning.

Thanks

---

<div class="post-metadata">

**Author:** ![jcsalem](https://avatars.discourse-cdn.com/v4/letter/j/848f3c/32.png) [@jcsalem](https://discuss.blues.com/u/jcsalem)\
**Post date:** [September 19, 2023, 8:00pm UTC](https://discuss.blues.com/t/public-ip-addresses-for-firewall/1670/4 "2023-09-19T20:00:50Z")

</div>

I totally get that.

It’s definitely on our list of requested features. We hope to make it available in the coming quarter.