Anyone know the best way to get the public IP for ...
# suitescript
c
Anyone know the best way to get the public IP for my NS data centre? A third party applications I'm integrating with requires this to be whitelisted in the firewall.
p
You can’t rely on NS IPs. Check the help, it bangs on about it :)
b
In addition to the standard NetSuite IP Addresses document telling you that this is a bad idea, there is now a Test Windows Planned to Help Identify Outbound Connections Using _IP_ Address-based Rules
because it is becoming more of a bad idea to do this
c
So what's the best thing to give to the firewall people?
p
Are the requests from your 3rd party to NS or from NS to the 3rd party?
c
@PNJ Both directions
With a string iptables config on the third-party side
p
Given you can’t do name-based rules in iptables, the best you’re going to get is a cron job that parses the output of dig for NS resources & updates/flushes rules accordingly
I’ve worked with an EDI provider that tried to IP lock & it was a nightmare
Just use API keys / decent authentication. Sigh
c
@PNJ they've come back to say IP only. I've pushed back and escalated it to someone with more patience than me.
p
They're not going to have any choice in the matter. If you read the SuiteAnswer that @battk linked, you can see that the writing is on the wall for this way of managing security. Best of luck! 😉
c
Yeah, I've sent them a screenshot of the docs - balls in their court now
b
if all else fails, you may end up having to use the ip address blocks owned by netsuite and possibly oracle cloud
you probably want to use the test window to see if that is an unreasonable option