We want to setup SMTP for JotForm

  • Profile Image
    Vasi Piero
    Asked on September 08, 2020 at 05:45 PM

    Hi,

    we want to setup SMTP for JotForm - I saw in another post you mention we should allow a wide range of IP addresses (AWS, probably shared IPs) - this is pretty unsecure from my point of view, as a lot of other services then also could send SMTP emails over our environment.

    What is the best practice ? Any way to limit down which IPs can send Emails in JotForm?



    This is a re-post of a comment on How to Setup SMTP for a Form

  • Profile Image
    Mike_G
    Answered on September 08, 2020 at 09:44 PM

    You can find the list of all the JoForm IP addresses and email domains that you can whitelist on this guide.

    Whitelisting-JotForm-IP-Addresses-and-Domains

    Feel free to let us know if you need any further assistance.

  • Profile Image
    Piero Vasi 
    Answered on September 09, 2020 at 02:13 AM

    Thanks for the quick reply! 

    But I think this is a wide range of Amazon Web Services IPs. Are they only used by JotForm? We are talking about thousands of IPs in your list. Just puting them on a whitelist wouldn't be a propper solution from my point of view.

    Are these IPs dedicated to JotForm?

    How frequent is this list of IPs changing?


  • Profile Image
    Mike_G
    Answered on September 09, 2020 at 03:57 AM

    The range of IP addresses listed in the guide that I linked in my last reply are the ones assigned by AmazonSES and only JotForm uses those IP addresses. We do not use dedicated IP addresses — the set of IP pools changes from time to time for security reasons. And, since that is the case, we cannot really provide you a fixed set of IP addresses being used.

  • Profile Image
    Piero Vasi 
    Answered on September 09, 2020 at 04:49 AM

    Many thanks for the quick reply Mike! This brought more light into your setup.

    So I understand, JotForm gets a set of IPs assigned by the AWS service and AWS only assigns those IPs to JotForm. Means, in case we whitelist your IPs, we only whitelist JotForms Service and not any other organization using Amazon SES , right?

  • Profile Image
    Jed_C
    Answered on September 09, 2020 at 06:10 AM

    Business IPs uses static and not dynamic IPs. Those are different IPs because a single public IP can be subnet into many IPs so to answer your question, those IPs are static and doesn't change. You are correct that we use AWS web host service so they are the one who assign those subnet IPs to Jotform.