Allowlisting Staffbase Email

Domain names and IP ranges that can be allowed for Staffbase Email functionality

Depending on your organization's network security requirements, allowlisting select Staffbase Email (formerly Bananatag) domains is required to ensure the successful delivery, tracking of emails, and avoiding spam folder.

Staffbase strongly discourages the practice of whitelisting or allowlisting as it can affect the overall performance of your application. We currently do not support the use of allowlisting. The information available here can be used when necessary and when being aware of the limitations that come with it.
The URLs listed here can change without prior notification. Review this page periodically to ensure the URLs listed here match those allowed in your system.

Domain Names to Allow

Allow these domain names for basic email functionality:

  • *.bl-1.com
    • Tracking Event System
  • *.bananatag.com
    • App + Image Hosting
  • bt-prod-eu-c1-email-designer.s3.eu-central-1.amazonaws.com
    • EU Hosting only

Sending IP Addresses

Many organizations have firewalls and other mail security tools in place to help protect from attacks on the internet. Knowing the IP addresses that emails will be coming from allows your team to specifically trust emails coming from Staffbase Email, or to create rules in systems for how those messages should be handled that are specific only to messages coming from Staffbase Email.

While Staffbase Email uses AWS SES to deliver emails, the outgoing IP addresses are dedicated and specific to Staffbase Email, so rules created for these IP addresses will apply only to mail from Staffbase Email and not any other individuals or businesses who may also be using AWS SES.

Staffbase Email maintains a set of IP addresses that your emails can be sent from. These IP addresses are dedicated and specific to both our US and EU Staffbase Email instances. Below you can find additional information on our sending IP addresses specific to both our Staffbase Email instances.

Emails sent from the web app in Staffbase Email will be sent through one of the IP addresses listed below. There is no guarantee which IP address an individual email will be sent through, so if performing an allowlist process the entire range would need to be allow listed.
In the future there may be more IP addresses added, as of the writing of this post these ranges are used.

IP Ranges for US Instance

The following information about sending IP addresses only applies to our US Hosting instance, app.bananatag.com.
More details on how to access our different instances.

Customers sending from the web app can check the Staffbase Email sending IP SPF record to find the outgoing IP addresses emails will be coming from. The IP addresses can be obtained by querying Staffbase Email's SPF record (at the spf.bananatag.com subdomain).

This is how to query the list of IP addresses from Terminal on Mac (including a filter to include only the SPF record):

dig TXT spf.bananatag.com +short| grep 'v=spf1'

Here’s the equivalent query using the Windows command prompt:

nslookup -type=TXT spf.bananatag.com | find "v=spf1"

Returned list of IP ranges:

  • ip4:23.251.237.159/32
  • ip4:23.251.237.160/29
  • ip4:23.251.237.168/30

Those ranges include IP addresses from 23.251.237.159 to 23.251.237.171.

Please remember that these addresses are subject to change and the SPF record will be updated so checking that record will always be the best way to ensure you have the most up to date information.

IP Ranges for EU Instance

The following information only applies to our EU Hosting instance, app.de.bananatag.com.
More details on how to access our different instances.

Used list of IP ranges:

  • ip4:69.169.228.240/29
  • ip4:69.169.228.248/30
  • ip4:69.169.228.252/32

Those ranges include IP addresses from 69.169.228.240 to 69.169.228.252.

Please remember that these addresses are subject to change so checking this page will always be the best way to ensure you have the most up to date information.