What are the Google and Postini IP ranges?

Important: In preparation for the Postini Transition to Google Apps, Postini customers must ensure that their firewall allows both Google and Postini IP address ranges. If you configured your firewall a long time ago, it may be open to Postini IPs but not yet to Google IPs. (If you never locked down your firewall in the first place, you may not need to make changes to your firewall configuration.) See How your firewall should be configured for more details.

Locking down your firewall to Google IP address ranges

For instructions, see Google IP address ranges.

Locking down your firewall to Postini IP address ranges

The following are the IP ranges for the Postini systems:

System IP Range CIDR Range IP/Subnet Mask Pair
5, 6, 7, 8, 20 64.18.0.0 - 64.18.15.255 64.18.0.0/20 64.18.0.0
mask 255.255.240.0
9 74.125.148.0 - 74.125.151.255 74.125.148.0/22 74.125.148.0
mask 255.255.252.0
10 74.125.244.0 - 74.125.247.255 74.125.244.0/22

74.125.244.0
mask 255.255.252.0

 

11, 20, 200, 201 207.126.144.0 - 207.126.159.255 207.126.144.0/20 207.126.144.0
mask 255.255.240.0

Note: For System 20 customers, two sets of IP ranges are applicable.

To determine the Postini system for your account:

Your system number is shown the URL when you log in to the Administration Console or Message Center. The system number is prefaced by "ac-s" or "mc-s", for example:

URL displayed for an account on System 8 when logged in to the Administration Console:

https://ac-s8.postini.com/exec/adminstart?

URL displayed for an account on System 200 when logged in to the Message Center:

https://mc-s200.postini.com/app/msgctr/junk_quarantine

Note: As of September 2004, the following IP ranges are no longer in use. It is safe to remove any mail server or router configurations to accept traffic from these ranges without impairing the email protection service connectivity.

12.158.34.0/24 (12.158.34.0 mask 255.255.255.0)
12.158.35.0/24 (12.158.35.0 mask 255.255.255.0)
12.158.36.0/24 (12.158.36.0 mask 255.255.255.0)
12.158.38.0/24 (12.158.38.0 mask 255.255.255.0)
12.158.39.0/24 (12.158.39.0 mask 255.255.255.0)
38.115.174.0/24 (38.115.174.0 mask 255.255.255.0)
63.240.161.0/24 (63.240.161.0 mask 255.255.255.0))
63.240.165.0/24 (63.240.165.0 mask 255.255.255.0)
63.240.181.0/24 (63.240.181.0 mask 255.255.255.0)


For a checklist of security best practices and links to other important resources for your service, visit Postini Security Central.