IP allowlisting limits access to your Mailosaur account to the networks you trust, such as your office network or VPN. When it is on, Mailosaur rejects access to your account from any IP address that is not on your allowlist. This includes signing in to the Dashboard and requests made with your API keys.
This page is about controlling where people can access your account from. To let traffic to and from Mailosaur through your own firewall, see IP addresses and ports.
Before you start
- IP allowlisting is available as an add-on to the Enterprise plan. To add it to your account, contact our sales team.
- You must be an Account Administrator to manage the allowlist.
What IP allowlisting affects
When IP allowlisting is on, all access to your account must come from an address on the allowlist. This applies to everyone on your account, and to every way of using it, including the Dashboard and the API.
Some things are not affected:
- Email and SMS messages still arrive in your inboxes, whatever address they are sent from.
- Links that you share to email previews keep working.
Open the IP allowlisting page
Go to Account settings, then select Security > IP allowlisting.
Add addresses to the allowlist
- In Add addresses, enter one or more entries. Separate entries with commas or new lines.
- Click Add.
Your entries are saved straight away. The allowlist can hold up to 100 entries, in any of these formats:
| Format | Example |
|---|---|
| A single IPv4 address | 51.52.137.39 |
| A CIDR block | 10.0.0.0/24 |
| A range of addresses | 203.0.113.10-203.0.113.20 |
Do not put spaces around the hyphen in a range.
The entry that covers the IP address you are using now is marked Your current IP.
Turn on IP allowlisting
To turn on IP allowlisting, your current IP address must be on the allowlist so you do not lock yourself out. If it is not on the allowlist yet, the page displays your current IP address. Click Add current IP to add it.
To turn on IP allowlisting:
- Click the Enable IP allowlisting switch.
- Click Enable to confirm.
If anyone on your account has used Mailosaur in the last 30 days from an address that is not on the allowlist, a dialog lists them instead, with the IP address each person last used. They lose access as soon as you turn on IP allowlisting. To keep their access, click Cancel, add their addresses to the allowlist, and try again. Click Copy all IP addresses to copy the list of addresses.
Remove an address
- Open the actions menu at the end of the entry's row, then select Remove.
- Click Remove to confirm.
While IP allowlisting is on, you cannot remove the entry that covers your current IP address.
To change an entry, remove it and add the new entry.
Turn off IP allowlisting
- Click the Disable IP allowlisting switch.
- Click Disable to confirm.
Mailosaur then accepts access to your account from any IP address. Your allowlist is kept, so you can turn IP allowlisting on again later.
What blocked users see
If someone signs in to the Dashboard from an address that is not on the allowlist, Mailosaur signs them out and shows an Access blocked message. Requests from that address that use your account's API keys are rejected with a 403 Forbidden response.
To give them access, add their IP address to the allowlist.
If you are locked out
If everyone on your account is locked out, contact our support team at support@mailosaur.com.