Jump to content

Recommended Posts

Posted

I'm using the API to get a list of IP addresses in order to whitelist those IP's in the Linux iptables firewall rules.  This process works fine on an unrestricted server.  The server I'm working with is very restricted, so it isn't able to communicate with the api.  

For example, our pulseway address is http://company.pulseway.com which translates to 12.34.56.78

I added the following into iptables.save:

#Pulseway
-A INPUT -i eth0 -s 12.34.56.78 -j ACCEPT
-A OUTPUT -o eth0 -d 12.34.56.78 -j ACCEPT

I test outbound communications by running the following:

telnet 12.34.56.78 443 and it connects so I'm assuming it's the inbound communication.  My assumption is this isn't working because the IP returning the data is different than the IP that the data is sent to.  Let me know if I can get the list of IP's so I can whitelist in our iptables.

Thanks.

 

 

  • Administrators
Posted

Hi @spinto,

We use load balancers for high availability. Make sure you add all IP addresses that are resolved by the DNS lookup to your whitelist.

-Paul

  • 8 months later...
Posted

Is there a domain name I can whitelist instead of whitelisting a bunch of IPs? There's gonna be a time where you really need to remote in and just because the IP changed, the remote access won't work. 

  • Administrators
Posted

Pulseway doesn't require any ports to be opened in inbound. We only use 443 in outbound. I'd suggest whitelisting the Pulseway executables in the firewall.

-Paul

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...