Allow Liitora through your firewall
Who this is for: admins whose systems only accept connections from known addresses, and the IT team that runs those firewalls.
Before you start: nothing. Everyone can open Settings.
Every connection Liitora makes to your systems leaves from one fixed public address. If your firewall, API gateway or SFTP server only lets in known addresses, add that address to the allowlist once.
- Open Settings.
- Stay on the Profile page.
- Find the card Address for your firewall. Copy the address shown there.
- In your firewall, API gateway or server, allow that address. Allow it for the ports your systems use: 443 for HTTPS, 22 for SFTP, and 465 or 587 for your own mail server.
- Open Connections and select Test connection to check that Liitora gets through. See Test a connection.
If the card says “This platform has no fixed outgoing address yet”, there is nothing to allow for now. Check again before you limit access on your side.
What uses this address
Section titled “What uses this address”All of these leave from the address shown in your settings:
- HTTP calls from your workflows, and Test connection;
- sign-in with OAuth 2 to your systems;
- file connections (SFTP and S3);
- alert channels and your own SMTP server.
Liitora’s own services (its database, secret store and sign-in) never use it, and nothing else on the internet can send through it.
What Liitora still refuses
Section titled “What Liitora still refuses”The fixed address does not open anything up. Liitora still connects only to public addresses, and only on the ports above. Private and internal addresses are always refused. See Private address blocked.
If a step fails with “Outbound connections to port N are not allowed”, the system uses a port Liitora does not connect to. Use the standard port for HTTPS, SFTP or mail.
If a step fails with “Outbound connections are not set up on this platform yet, so nothing was sent.”, nothing left Liitora. This is on our side, not yours. Check the status page, and retry the run later.