paypal - 将发送 Paypal IPN 的 IP 列入白名单的防火墙安全规则

Question

我们的安全经理想要设置一些防火墙规则，只允许来自已知 IP 的外部流量进入系统。我想知道以下列表(来自此 url https://www.paypal.com/au/smarthelp/article/what-are-the-ip-addresses-for-live-paypal-servers-ts1056)是发送 IPN 的 IP 的完整列表，Paypal 还会继续向列表中添加更多 IP 吗？

是否所有 IPN 通知都来自可以解析为 ipnpb.paypal.com 的 IP 地址？

173.0.84.8
173.0.84.40
173.0.88.8
173.0.88.40
64.4.248.8
173.0.92.8
173.0.93.8
64.4.249.8

Additional IP addresses coming later in 2014:
2.22.141.54
23.4.189.54
23.4.36.66
23.4.61.54
23.5.13.54
23.5.253.54
23.7.77.54
23.7.141.54
23.9.125.54
23.9.84.66
23.13.173.54
23.13.29.54
23.15.157.54
23.34.205.54
23.34.221.54
23.34.228.66
23.35.109.54
23.35.13.54
23.35.173.54
23.35.221.54
23.35.29.54
23.35.45.54
23.35.61.54
23.35.93.54
23.36.13.54
23.37.141.54
23.37.173.54
23.37.189.54
23.37.36.66
23.38.29.54
23.38.93.54
23.41.141.54
23.41.157.54
23.41.174.218
23.41.77.54
23.42.13.54
23.42.29.54
23.43.13.54
23.43.141.54
23.43.157.54
23.43.68.66
23.44.157.54
23.44.253.54
23.46.109.54
23.46.125.54
23.46.45.54
23.46.77.54
23.47.237.54
23.47.253.54
23.47.29.54
23.49.125.54
23.49.141.54
23.49.157.54
23.49.77.54
23.49.93.54
23.50.109.54
23.50.157.54
23.50.189.54
23.50.205.54
23.50.77.54
23.50.93.54
23.51.125.54
23.51.237.54
23.51.244.66
23.51.29.54
23.51.45.54
23.52.157.54
23.52.29.54
23.52.61.54
23.52.93.54
23.53.109.54
23.53.157.54
23.53.189.54
23.53.29.54
23.53.93.54
23.54.109.54
23.54.141.54
23.54.189.54
23.54.237.54
23.54.93.54
23.55.157.54
23.56.157.54
23.57.109.54
23.57.221.54
23.57.237.54
23.58.160.37
23.58.45.54
23.59.141.54
23.60.141.54
23.61.189.54
23.61.77.54
23.62.253.54
23.63.141.54
23.64.173.54
23.64.93.54
23.65.13.54
23.65.141.54
23.74.21.54

Answer 1

PayPal 可以随时更改 IP。无法保证此列表是最新的或准确的。这就是为什么 PayPal 给您的回调(IPN、PDT 等)有办法验证调用的真实性。