cancel
Showing results for 
Search instead for 
Did you mean: 
New Contributor

ip range gotomeeting

good day,


Normally we always use gotomeeting without problems, but since yesterday we have problems creating meetings. Our office uses a firewall and we noticed that now the gotomeeting looks for some ip of singapore, for example 3.1.239.106. Do you know the range of ips they use?, because I have appeared different IPS, like also 3.1.230.158.

thanks in advance

11 REPLIES 11
LogMeIn Contributor

Re: ip range gotomeeting

Hi Jose,

You may find LMI IP Ranges available on our firewall document here:  https://support.logmeininc.com/gotomeeting/help/optimal-firewall-configuration-g2m060010

 

Active Contributor

Re: ip range gotomeeting

AshC, this also began happening with our organization a few days ago. For a  period of the day GoToMeeting has suddenly started routing traffic through Singapore, which is geoblocked on our firewall. The returned Singapore IP addresses changes with each GoToMeeting connection so we can just whitelist IPs one by one. For example the none of the ones we caught are mentioned in the original post.

 

The IP ranges provided at https://support.logmeininc.com/gotomeeting/help/optimal-firewall-configuration-g2m060010  do not provide any Singapore 3.1. IP address blocks. The closest thing is a blurb at the bottom that mentions Singapore as a "Public Cloud" data center location. We made sure all recommended settings on your firewall configuration page were added after the issue began, with zero effect . The only thing that resolves it is whitelisting all of Singapore on our firewall, which is definitely not a solution we are willing to employ.

 

We have been through two tiers of your support so far and neither knew of a Singapore location and when we asked for an IP block for Singapore we were told "No, because they don't exist. We don't use Singapore as a location"

 

When GoToMeeting decides to route traffic through Singapore it is very detrimental as no one in our company can use it.

LogMeIn Contributor

Re: ip range gotomeeting

@nevans Please give us the IPs that you believe GoToMeeting is connecting through, and I will look into where those are located, and update the firewall document if needed.

New Contributor

Re: ip range gotomeeting

thanks AshC

 

i think is a services of Amazon AWS that gotomeeting needs, to do the connection.

 

3.1.239.106

3.1.230.158

3.1.190.76

3.0.42.49

3.1.125.108

18.136.162.47

 

at the moment..

 

greetings.

Active Contributor

Re: ip range gotomeeting

We got a few mentioned above on packet captures and these

3.0.117.120
3.1.37.83
 
Keep in mind there were even more we did not write down because it kept changing.
Active Contributor

Re: ip range gotomeeting

@AshC  any word?

Highlighted
LogMeIn Contributor

Re: ip range gotomeeting

Hi @nevans ,

Those IPs represent some locations within third party networks that LMI uses for cloud storage and transmission of audio/video feeds.  For example, this list may change from time to time: https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html

 

As mentioned in our firewall docs, whitelisting by IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our third-party provider networks need to be periodically audited and modified. These changes are necessary to continue to provide the maximum performance for our LogMeIn products.

Active Contributor

Re: ip range gotomeeting

 
@AshC  That is exactly the problem. There are these hidden, ever changing IP addresses from Singapore and there is no mention of how to address this in logmein.com's firewall documention. Singapore is geoblocked for very good reasons. It is very odd that traffic directly from Singapore is not routed back through the United States before its final destination. This is the very first traffic from logmein/GtM that has not been sent to us from within the USA.

 

@AshC wrote

As mentioned in our firewall docs, whitelisting by IP ranges instead of domain names for the firewall configuration is discouraged unless absolutely necessary because our IP ranges and those of our third-party provider networks need to be periodically audited and modified. These changes are necessary to continue to provide the maximum performance for our LogMeIn products.

We know, but we are at a standstill for the hours GtM doesn't work so it is absolutely necessary we try something if we can. We also do not like to add ranges, but while a multitude of other ranges and information are mentioned, this range (3.1....) is not in logmein.com's or AWS's JSON documentation.

 

The best solution is to not be getting traffic straight from Singapore to our organization to begin with. The second best solution is a range/block/group/etc. The third is whitelisting Singapore completely, and it is not an option for security concerns.

LogMeIn Contributor

Re: ip range gotomeeting

I understand where you're coming from.  Unfortunately we do not currently have the ability to reserve static IP blocks through various providers