Need help with IP Ranges

Website, Application, Performance DNS & Network
1

Hello,

I need help with whitelisting some IP addresses and IP ranges as I am not a networking expert.

The IPs to whitelist are and their subnets:

  • 68.67.62.160/27
  • 64.187.177.128/26

Do I need to specify in the subnet in CF ?

ALSO, the following IP ranges:

  • 72.250.206.50 - 72.250.206.52
  • 72.250.206.65 - 72.250.206.126

I tried converting the IP ranges with an online tool but I not sure that the result makes sens. The tool would give me this result :

  • 73.251.204.50/31

  • 73.251.204.52/32

  • 73.251.204.65/32

  • 73.251.204.66/31

  • 73.251.204.68/30

  • 73.251.204.72/29

  • 73.251.204.80/28

  • 73.251.204.96/28

  • 73.251.204.112/29

  • 73.251.204.120/30

  • 73.251.204.124/31

  • 73.251.204.126/32

Does it makes sens ?

Thanks in advance !

2

Hi @francis2,

You can only whitelist IP ranges /24 or /16 using the IP Access Rule (on Firewall > Tools).

But you can create a Firewall Rule with an “Allow” action using other IP ranges:

(ip.src in {68.67.62.160/27 64.187.177.128/26}) and so on, with each range separated by a space.

AFAIK, the Firewall Rule will only prevent other Firewall Rules from blocking/challenging these IPs. The IP Access Rules would also prevent WAF from applying.

If this is for a back end area of the website or app, you could alternatively create an Access Policy Group with a bypass policy for these ranges.

1 Like
3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.