Ask from Trustly:
"Can you help me with the IPs that should be whitelisted for SFTP?"
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Cstone | T415135 Get Trustly Reconciliation reports downloading | |||
| Resolved | AKanji-WMF | T414833 IPs for Trustly SFTP reports |
Event Timeline
Comment Actions
Here are the two public IP ranges we use:
208.80.155.0/27 208.80.152.224/28
Once they have those added, we will need to know what IPs/hostnames we would be connecting to for pulling the reports.
Comment Actions
Response from the IP range:
The first one contains 30 usable IPs (/27) and the second one contains 14 usable IPs (/28). Is your team able to reduce the amount of IPs? If not, we would need to receive approval from our SecOps before proceeding to whitelist
The SFTP access is performed via NLB, which does not have static IP adresses, Our team recommends using the DNS to whitelist the SFTP on their side. The current PROD DNS is: external.paywithmybank.com
Comment Actions
The trimmed down IP range would be:
208.80.152.230 208.80.152.232 208.80.155.7 208.80.155.17
We can use an ipset config to cover our outbound restrictions to their DNS name.
Comment Actions
Used the info from T414833#11530389 to create the ipset and iptables rules. Basic ssh connection has been verified as working. I believe this task is complete from the ops end.
Comment Actions
Resolving, @Cstone let us know if there's anything final that needs to be communicated to Trustly.