WAF CIDR for Shopify and Webhook Domains

bemissmith
Tourist
9 1 1

Can someone please tell me what the correct CIDR values would be for whitelisting requests coming from shopify backend calls as well as webhooks?

myshopify.com: 23.227.37.0/24 ??

webhooks: ???

I know there is a lot of talk around securing the calls from shopify using the hmac but we should also be able to firewall off ips from invalid sources to prevent DOS attacks as well.

0 Likes