Mandrill Webhooks - Security

Question

For security purposes, I try to allow only Mandrill's IP(s) to access these urls.

Does anyone know them?

Answer 1

Mandrill's signature is located in the HTTP response header: Authenticating-webhook-requests

In the request header find: X-Mandrill-Signature. This is a base64 of the hashcode, signed using web-hook key. This key is secret to your webhook only.