[Firewall][Documentation][Outdated] Broken IP Address Fetch / Missing Static Ranges on Firewall Docs Page

[khanhnt748]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Flutter (Dart)

Steps to reproduce

Title: Documentation Outdated: Broken IP Address Fetch on Firewall Docs Page

Description

The partial page for configuring firewall settings at https://docs.codemagic.io/partials/firewall/ is failing to display the static IP addresses required for whitelisting incoming build traffic.

Steps to Reproduce

1. Open a browser and navigate to the firewall documentation page: https://docs.codemagic.io/partials/firewall/.
2. Scroll to the section under "The following IP addresses must be allowed through the firewall (whitelisted):".
3. Observe that the loading spinner/text never resolves to show the actual IP strings.

Expected results

The page should list the active, usable static IP blocks required to grant Codemagic build machines access through corporate firewalls (e.g., to access self-hosted Git repositories, internal servers, or dependency mirrors).

Actual results

The Codemagic firewall documentation contains incomplete whitelist IP address ranges, causing SSH connection timeouts when CodeMagic VM instances attempt to fetch private source code repositories. This issue prevents secure connections to self-hosted Git repositories due to missing outbound IP blocks in corporate firewalls. You can review the current documentation at Codemagic Docs.

Cloning into '/Users/builder/clone'...
ssh: connect to host git.domain.com port 22: Operation timed out
fatal: Could not read from remote repository.

Build id (optional)

No response

[dtrdic]

Hello @khanhnt748
The documentation itself is up to date, and the listed IP ranges are correct and active. Perhaps you added the IPs without including the CIDR suffix?

For example, 66.185.17.80/29 does not represent a single IP address. The /29 means the range covers multiple IP addresses, from 66.185.17.80 to 66.185.17.87.

Please double-check that the full ranges below were whitelisted correctly, including their CIDR suffixes:

34.74.234.56/32
35.185.76.207/32
38.22.7.112/29
66.185.17.80/29
66.185.18.0/29
162.253.134.16/29
207.254.42.240/29

Please also make sure you allow ports that your service uses - usually the default SSH or HTTPS ports.

Another useful check would be to add the following command to the pre_clone_scripts section:

curl ifconfig.co

This will return the public IP address of the current machine, which you can then confirm if is whitelisted