Search code examples
securityipmandrill

Mandrill Webhooks - Security

For security purposes, I try to allow only Mandrill's IP(s) to access these urls.

Does anyone know them?

Solution

  • We have a range of IPs used for webhooks, but they can (and likely will) change or have new ones added as we scale. An alternative would be to add a query string to the webhook URL you add in Mandrill, and then check for that query string when a POST comes in so you can verify it's coming from Mandrill.