What salesforce.com network IP addresses do I need to whitelist?

Salesforce.com’s IP Ranges

All IP ranges are provided in Classless Inter-Domain Routing (CIDR) notation. For more information on CIDR please see theWikipedia article. If your network hardware does not  understand CIDR notation, please use one of the many converters available online, such as the converter provided by Wolfram|Alpha.

Salesforce.com’s Network Engineering team recommends that customers whitelist the following IP ranges:

[204.14.232.0/21, 96.43.144.0/20, 182.50.76.0/22]

We strongly discourage customers  from whitelisting specific sites. We recommend that customers do not whitelist IP ranges by data center. These practices may cause service interruptions. Disaster recovery events, as well as network architecture improvements, can change the IP addresses that a customer uses to access their instance. If you have a need to whitelist IP ranges by data center, please contact Customer Support, your Customer Success Manager, or log a Support Case.

 

Email Security Filters

Salesforce.com sends email from a variety of  IP addresses. If your organization blocks any of these IP addresses, users may not receive all email sent from Salesforce.

To ensure that your organization’s users receive all Salesforce emails, follow the guidelines for IP whitelisting earlier in the article and ensure that  the following 52 IP addresses are whitelisted.  

• 96.43.144.64 to 96.43.144.65
• 96.43.148.64 to 96.43.148.65
• 182.50.78.64 to 182.50.78.79
• 204.14.232.64 to 204.14.232.79
• 204.14.234.64 to 204.14.234.79

If you have enabled email relaying, you only need to whitelist the IP addresses that Salesforce uses for email relaying.

• 96.43.144.65
• 96.43.148.65
• 182.50.78.65
• 204.14.232.65
• 204.14.234.65

For information on email relaying, see Setting Up Email Relaying.

 

API Integrations

API integrations use the same set of IP ranges as the Salesforce website. Please use the IP ranges listed in “Salesforce.com’s IP Ranges” above.

For more information on API security and port information, please refer the the API developer documentation:

http://www.salesforce.com/us/developer/docs/api/index_Left.htm#StartTopic=Content/sforce_api_concepts_security.htm?SearchType=Stem

 

Firewalls

IP whitelisting can occur at several different points on a customer’s network, but the most common place is the firewall. When adding or updating IP whitelisting, please ensure that any IP restrictions on your firewall match the salesforce.com best practices described in this article.