I want to set my firewall to only allow HTTP connections that originate from Apps Script. My Google Spreadsheets project uses URLFetch make queries back to my server. For development, that "server" is just my desktop at home. To allow that, I had to set a rule in the firewall to allow TCP on port 80. Restricting source address is never a substitute for real security, but it would block most of the scripts that periodically scan my IP for IIS/Apache vulnerabilities. So far, the legitimate connections are coming from Presumably, that could change at any time. I can't get reverse DNS on that (i.e., "host") so I can't even do much weaker programmatic filtering.

Is there a known IP address range that Apps Script sends URLFetch connects from?

Alternate suggestions are also welcome. Unfortunately, App Engine won't work. It's not compatible with my application.

3 - - - - - - - - - -

Source: https://developers.google.com/apps-script/jdbc#accessing


The second line in the top part of the documentation for UrlFetchApp tells you how to get the IP addresses to whitelist.


Requests made using this service originate from a set pool of IP ranges. You can look up the full list of IP addresses if you need to whitelist or approve these requests.


Here's my list. Most are from ionFish's list but some I've gleaned from web server log files. It's probably still incomplete though.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.