Changes to Paypal -- Will these effect me?

[tspek]

I do some maintenance work for a guy, I didn't set up virtuemart or paypal but we're just using the standard paypal method that came with virtuemart and are using the "HTML-Form based" option. I don't think any of these changes will effect us but I'm also not sure how I would know 

Any help is appreciated.

We've let you know many times over the past few months that we have been making upgrades to our system to help improve the performance and availability of our services.  We have scheduled a few more activities which will help make our services more scalable and ensure that they’re continuously available to our growing customer base, particularly as we near the holiday shopping season. 
Please be sure to share this notification with your technical resources because network configuration changes may be necessary to avoid a disruption in service.  Please note that there is also information regarding a short service interruption for Payflow on October 1st.

Customers impacted:

"IPN Customers who have their IPN Listener script behind their firewall with hard-coding of IP Addresses or use of Access Control List management of IP addresses" https://www.x.com/content/ip-address-expansion-paypal-services

"Customers using Payflow Pro, Payflow Link, V2 Payflow, Websites Payments Pro (3.0) using Gateway credentials and Website Payments Pro Payflow Edition (2.0)" https://www.x.com/developers/paypal/documentation-tools/site-status/notification-planned-downtime-during-oct-01-maintenance-pf-live-2263

"API Customers, including Express Checkout, Websites Payments Pro (3.0) and Website Payments Pro Payflow Edition (2.0), who either hard code outbound IP addresses or use an Access Control List." https://www.x.com/content/ip-address-expansion-paypal-services

[911websiterepair]

if your using standard paypal method,    it should not effect you

[stinga]

G'day,

I have not read the message yet, but it sounds like they are altering/increasing the number of ip address's. If so then you might reject the IPN because the IPN is coming from an unrecognised IP address, a small change in notify.php will fix the issue.
We had the same problem a year or so ago when PP changed there IP numbers.
I made a longer running change to check the domain name rather than the ip address.

[carsten888]

While someone is looking into this code in notify.php, please have a look again at my fix for a bug I strugled with earlyer this year. Maybe this can be included.
http://forum.virtuemart.net/index.php?topic=82282.msg273157#msg273157

Meanwhile I have altered it to this.

original code:

Code Select Expand

$paypal_iplist = array();
        $paypal_iplist = gethostbynamel('www.paypal.com');
$paypal_iplist2 = array();
$paypal_iplist2 = gethostbynamel('notify.paypal.com');
        $paypal_iplist3 = array();
        $paypal_iplist3 = array( '216.113.188.202' , '216.113.188.203' , '216.113.188.204' , '66.211.170.66' );
        $paypal_iplist = array_merge( $paypal_iplist, $paypal_iplist2, $paypal_iplist3 );

       

changed that to:

Code Select Expand

$paypal_iplist = array();
$paypal_iplist[] = '64.4.241.33';
$paypal_iplist[] = '64.4.241.49';
$paypal_iplist[] = '66.211.169.2';
$paypal_iplist[] = '66.211.169.65';
$paypal_iplist[] = '66.211.170.66';
$paypal_iplist[] = '216.113.188.202';
$paypal_iplist[] = '216.113.188.203';
$paypal_iplist[] = '216.113.188.204';

$paypal_iplist2 = gethostbynamel('www.paypal.com');
if(is_array($paypal_iplist2)){
//make sure its an array
//only then add to array to avoid errors destroying the whole array
foreach($paypal_iplist2 as $iplist_item){
$paypal_iplist[] = $iplist_item;
}
}

$paypal_iplist3 = gethostbynamel('notify.paypal.com');
if(is_array($paypal_iplist3)){
//make sure its an array
//only then add to array to avoid errors destroying the whole array
foreach($paypal_iplist3 as $iplist_item){
$paypal_iplist[] = $iplist_item;
}
}

     

[FinallyInSeattle]

I received the same email as the original poster as well as a notification of IP updates here: https://ppmts.custhelp.com/app/answers/detail/a_id/92.  I believe I am using what is regarded as "Standard PayPal" although I admit I've lost track of the various "flavors" of PayPal.  I've included an image of the landing page.

Anyway, is there a need to alter the current method of getting the ip list based on this new information?

Thanks in advance!

Code Select Expand


    // Get the list of IP addresses for www.paypal.com and notify.paypal.com
    $paypal_iplist = array();
        $paypal_iplist = gethostbynamel('www.paypal.com');
$paypal_iplist2 = gethostbynamel('notify.paypal.com');
        $paypal_iplist3 = array( '216.113.188.202' , '216.113.188.203' , '216.113.188.204' , '66.211.170.66' );
        $paypal_iplist = array_merge( $paypal_iplist, $paypal_iplist2, $paypal_iplist3 );


[attachment cleanup by admin]

[wldct]

As per @stinga's post, do we need to add more IP addresses to the notify.php script in that case? As to not reject the IPN? PayPal have listed all the new IP Address so do we simple copy and paste these in the notify.php doc alongside the existing ones that are in there?