# Whitelisting LE IP addresses / ranges in Firewall

**URL:** <https://community.letsencrypt.org/t/whitelisting-le-ip-addresses-ranges-in-firewall/45190>\
**Category:** Server\
**Created:** [October 28, 2017, 5:26pm UTC](https://community.letsencrypt.org/t/whitelisting-le-ip-addresses-ranges-in-firewall/45190 "2017-10-28T17:26:05Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Osiris](https://avatars.discourse-cdn.com/v4/letter/o/839c29/32.png) [@Osiris](https://community.letsencrypt.org/u/Osiris)\
**Post date:** [October 28, 2017, 5:28pm UTC](https://community.letsencrypt.org/t/whitelisting-le-ip-addresses-ranges-in-firewall/45190/2 "2017-10-28T17:28:52Z")

</div>

> [@MitchellK](#):
>
> Is there a set of IP’s or an IP block I can provide the client to allow permanent access from LE’s authentication servers?

There isn't and such a list won't be made in the future too. Let's Encrypt keeps the right to change the IP addresses used for authentication at will and won't release lists of it for security reasons.

To me it sounds a bit like "security by obscurity", but that's the current Let's Encrypt policy as far as I know.

If the `http-01` or `tls-sni-01` challenges can't be used because of such strict limititations, you can always look into the `dns-01` challenge.

---

_[View the full topic](https://community.letsencrypt.org/t/whitelisting-le-ip-addresses-ranges-in-firewall/45190)._