We want to setup SMTP for JotForm

Hi,

we want to setup SMTP for JotForm - I saw in another post you mention we should allow a wide range of IP addresses (AWS, probably shared IPs) - this is pretty unsecure from my point of view, as a lot of other services then also could send SMTP emails over our environment.

What is the best practice ? Any way to limit down which IPs can send Emails in JotForm?

You can find the list of all the JoForm IP addresses and email domains that you can whitelist on this guide.

Whitelisting-JotForm-IP-Addresses-and-Domains

Feel free to let us know if you need any further assistance.

Thanks for the quick reply! 

But I think this is a wide range of Amazon Web Services IPs. Are they only used by JotForm? We are talking about thousands of IPs in your list. Just puting them on a whitelist wouldn't be a propper solution from my point of view.

Are these IPs dedicated to JotForm?

How frequent is this list of IPs changing?

The range of IP addresses listed in the guide that I linked in my last reply are the ones assigned by AmazonSES and only JotForm uses those IP addresses. We do not use dedicated IP addresses — the set of IP pools changes from time to time for security reasons. And, since that is the case, we cannot really provide you a fixed set of IP addresses being used.

Many thanks for the quick reply Mike! This brought more light into your setup.

So I understand, JotForm gets a set of IPs assigned by the AWS service and AWS only assigns those IPs to JotForm. Means, in case we whitelist your IPs, we only whitelist JotForms Service and not any other organization using Amazon SES , right?

Business IPs uses static and not dynamic IPs. Those are different IPs because a single public IP can be subnet into many IPs so to answer your question, those IPs are static and doesn't change. You are correct that we use AWS web host service so they are the one who assign those subnet IPs to Jotform.