IP Addresses of api-secure.recaptcha.net

[PeterWoz]

I'm aware of the IP addresses for api-verify.recaptcha.net for
firewall configuration (we are using them, thank you.), but I could
not find any information on IP addresses for api-
secure.recaptcha.net.

We have a testing tool that is behind a firewall in our development
and quality assurance environments. We would like to tool to be able
to retrieve the challenge image (or sound), but to do so, we would
have to open our firewall for that URL, much the same as we opened it
for api-verify.recaptcha.net.

Could you supply a list/range of IP addresses for api-
secure.recaptcha.net? (or are they the same as api-
verify.recaptcha.net?)

Thanks.

[Adrian Godong]

http://wiki.recaptcha.net/index.php/Firewalls_and_reCAPTCHA

> --
> You received this message because you are subscribed to the Google Groups "reCAPTCHA" group.
> To post to this group, send email to reca...@googlegroups.com.
> To unsubscribe from this group, send email to recaptcha+...@googlegroups.com.
> For more options, visit this group at http://groups.google.com/group/recaptcha?hl=en.
>
>

--
Adrian Godong
adrian...@gmail.com

[Adrian Godong]

Ah, those doesn't list out api-secure. But IIRC, you don't need to
open up for api-secure, the client (your users) will call them from
their browser not through your server.

--
Adrian Godong
adrian...@gmail.com

[PeterWoz]

Thank you for your quick response Adrian. Yes, I am aware of that wiki
and you are correct that listing only refers to api-verify. Let me
explain further. Our testing tool that is using a browser (that is,
"the client") is behind a firewall in our development and quality
assurance environments. We are using api-secure to retrieve the
challenge image. We would need to open our firewall to allow our
testing tool to retrieve the challenge.

On Feb 8, 12:44 pm, Adrian Godong <adrian.god...@gmail.com> wrote:
> Ah, those doesn't list out api-secure. But IIRC, you don't need to
> open up for api-secure, the client (your users) will call them from
> their browser not through your server.
>
>
>
>
>
> On Mon, Feb 8, 2010 at 5:42 PM, Adrian Godong <adrian.god...@gmail.com> wrote:
> >http://wiki.recaptcha.net/index.php/Firewalls_and_reCAPTCHA
>

> > On Mon, Feb 8, 2010 at 5:40 PM, PeterWoz <peter.wozn...@hp.com> wrote:
> >> I'm aware of the IP addresses for api-verify.recaptcha.net for
> >> firewall configuration (we are using them, thank you.), but I could
> >> not find any information on IP addresses for api-
> >> secure.recaptcha.net.
>
> >> We have a testing tool that is behind a firewall in our development
> >> and quality assurance environments. We would like to tool to be able
> >> to retrieve the challenge image (or sound), but to do so, we would
> >> have to open our firewall for that URL, much the same as we opened it
> >> for api-verify.recaptcha.net.
>
> >> Could you supply a list/range of IP addresses for api-
> >> secure.recaptcha.net? (or are they the same as api-
> >> verify.recaptcha.net?)
>
> >> Thanks.
>
> >> --
> >> You received this message because you are subscribed to the Google Groups "reCAPTCHA" group.
> >> To post to this group, send email to reca...@googlegroups.com.
> >> To unsubscribe from this group, send email to recaptcha+...@googlegroups.com.
> >> For more options, visit this group athttp://groups.google.com/group/recaptcha?hl=en.
>
> > --
> > Adrian Godong

> > adrian.god...@gmail.com
>
> --
> Adrian Godong
> adrian.god...@gmail.com- Hide quoted text -
>
> - Show quoted text -

[reCAPTCHA Support]

Hi,

In the very near future, we're going to change the IP addresses of both the verify and non-verify servers as part of our migration to Google infrastructure. Due to the way the way Google infrastructure works, it is going to be harder to manage firewall rules like this. While we realize this is going to make things a bit harder for sysadmins, the large footprint of Google's infrastructure will result in substantial latency and reliability wins for users.

We would recommend doing the following:

• For a testing environment like this try to mock out the reCAPTCHA environment. There are a number of ways to do this, we've heard that some people set up their own server that implements the api-verify API.
• If possible try to firewall by domain. One way to do this is to set up a trusted squid proxy with ACLs that only permit it to access specific URLs, then opening outbound access on 80/443 for the proxy. This will be a much more reliable way to deal with the firewall.

- Ben

--
You received this message because you are subscribed to the Google Groups "reCAPTCHA" group.
To post to this group, send email to reca...@googlegroups.com.
To unsubscribe from this group, send email to recaptcha+...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/recaptcha?hl=en.

--
reCAPTCHA: stop spam, read books
http://recaptcha.net