Action Required: New IP Range for Merchants and Partners Using Real-Time Integrations

November 28, 2007 | In News & Announcements |

As one outcome of the recent service interruption, new servers are being added to the checkout systems. As a result, there will be an additional range of IP addresses from which communications may be sent for merchants or partners using any of the real-time integrations and who have servers with firewalls configured to accept connections from only approved IP addresses. If you are not using any of the real-time integrations listed below, or your server does not restrict connections, this change will not affect your ability to receive orders or use these real-time integrations.

Who Needs to Make This Change?

Only merchants or partners meeting both of the following criteria need to make this change:

  1. merchants or partners using any of the real-time integrations:
  2. merchants or partners who for security reasons provide their server with an approved list of IP addresses that may communicate with the server.

What Change Needs to Be Made?

If you are using any of the real-time integrations available to merchants (including inventory, shipping and tax, and order delivery), and you are currently using a firewall configuration that requires whitelisting the IP ranges of Yahoo! servers involved in the real-time integration, you will need to update this list to reflect the additional IP range:

209.191.67.0/25

The full list of IP addresses is as follows:

209.191.67.0/25 (NEW)
216.252.96.0/19
216.39.58.16/28
66.94.237.176/28
209.131.41.32/27
209.191.112.64/27
209.191.66.0/24
216.136.224.0/22
66.163.168.0/22
66.163.172.0/22

What Happens If I Do Not Make This Change?

If you do not add these IP addresses to your whitelist, communication for real-time integrations from these new servers may be rejected by your firewall which may have the following impacts depending on which real-time integrations you are using:

  • Order delivery may be delayed until Yahoo! resends orders from an IP address appearing on the white-list. (Your administrator may be receiving email communication errors).
  • Orders will be rejected if using real-time inventory calls and you have set to reject orders when the server is unreachable.
  • Orders will not have shipping and tax charges added if using the real-time tax and shipping integration and your server is not set to accept calls from the IP ranges listed above. (If setup, your administrator may be receiving email communication errors).

What If I am Unsure If I Need to Make This Change?

  • Merchants using a vendor service such as for order processing: Common vendors such as OrderMotion or StoneEdge have been notified of the new IP range and should be making this change on their side with no intervention needed on your part. If you have questions, contact your vendor, account manager, or our customer care team.
  • Merchants managing servers in-house: First check to be sure you are using real-time integrations such as for order posting, tax, shipping, or inventory. If not, then no action is required. If you do, ask your system administrator if the server has a whitelist of approved IP addresses for communicating with the server associated with the real-time integration in use. Contact your account manager (if applicable), or our customer care team if you have any questions.

Paul Boisvert
Yahoo! Small Business

9 Comments »

RSS feed for comments on this post.

  1. […] to the whitelist for their servers. Merchants and partners who may be impacted are encouraged to read the blog post for more […]

    Pingback by Yahoo! Merchant Solutions Systems Update — November 28, 2007 #

  2. Woow . . . I do not understand this new change at all.

    I have a merchant account and I do not know how to make these changes. . . Why make these changes now. Shopping season has started and for people like me who depend on the Store Editor and sitebuilding-lingo impaired, this, whatever it is will not be good at all.

    Can you please explain what I need to do in layman’s terms. Thank you so much.

    Comment by Cora Brock — November 29, 2007 #

  3. Cora–Sorry if the message was not clear. Action is ONLY required if you are using one or more of the real-time features: real-time tax or shipping, real-time inventory, or real-time order post. You would most certainly know if you set one of these up as you need to enter a url to a server you have set up (or to a partner service). I looked in your store and you don’t appear to be using any of these. As such, no action is required on your part.

    Paul

    Comment by pboisver — November 29, 2007 #

  4. Can you check to see if I need to make any changes? I’m not sure if I do……………

    Comment by Jose Mon — November 29, 2007 #

  5. Jose–Your store as well does not appear to be using any of the real-time integrations.

    Merchants–Only a very small percentage of stores use the real-time integrations, typically stores doing a very large volume of daily orders. Merchant Starter packages do not even have access to real-time tax or shipping functionality. If you haven’t heard of the real-time integrations, you likely are not using them. You can use the “more info” in the post to see the help documents which explain what these features are.

    If you don’t see a “real time link” under Order Settings in the Store Manager, then you are not using real-time order posting. If you do not have the real-time inventory selected on the Configure Inventory page (also under Order Settings) then you are not using real-time inventory. If your Tax Rates page does not show Real-time Tax and Shipping Configuration as the current setting, then you are not using either of these (and again Merchant Starter packages do not have access to real-time shipping or tax).

    Hopefully that helps to explain further who may be impacted by this change.

    Paul

    Comment by pboisver — November 29, 2007 #

  6. Hi, I am also not sure if I need to make this change. I think I do though because of my shipping methods. Can you check and then give me a step by step of exactly what I need to do?

    Thanks,
    Brynn

    Comment by Brynn — November 29, 2007 #

  7. Brynn, The option to “calculate shipping in real-time” is not the same as any of the real-time integrations. You are not using real-time inventory and since the “Real Time” Link is not appearing under Order Settings in your Store Manager, you are not using either real-time order posting or real-time tax & shipping. Hope that helps.

    Paul

    Comment by pboisver — November 29, 2007 #

  8. Paul:

    We use yahoo real time link for orders and process orders via yahoo PHP/MYSQL server. Where do we specify the whitelisted IP addresses?
    (a) In config.inc.php? If so, appreciate if you could list the applicable config directive(s).
    (b) How can we check the server IP address in our PHP application programs. We tried $_SERVER[”REMOTE_ADDR”] and it seems to be the client IP and not the yahoo server ip from the whitelist.

    Thanks in advance.

    Katy

    Comment by Katy — January 28, 2008 #

  9. Katy–I believe you do not need to do this step since you are using the Web Hosting side of your account for this functionality. This is only for merchants using an external server hosted outside of Yahoo! and who want to ensure communication with the real-time integrations comes only from Yahoo!.

    Paul

    Comment by pboisver — January 28, 2008 #

Leave a comment

XHTML: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>

Disclaimer and Reminder. The opinions expressed here are not necessarily the opinions of Yahoo! and we assume no responsibility for such content. Yahoo! may, in our sole discretion, remove comments that are off topic, inappropriate or otherwise violate our Terms of Service. Please do not post any private information unless you want it to be available publicly and never assume that you are completely anonymous and cannot be identified by your comments.

Copyright © 2006 Yahoo! Inc. All rights reserved. Privacy Policy - Terms of Service

Powered by WordPress on Yahoo! Web Hosting.
Copyright © 2006 Yahoo! Inc. All rights reserved. Privacy Policy - Terms of Service