> ## Documentation Index
> Fetch the complete documentation index at: https://docs.futurex.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Whitelist IP addresses

> Step-by-step instructions for whitelisting syslog destination IP addresses in VIP.

Whitelisting an IP address lets VIP deliver logs to a destination that would otherwise be blocked. To protect against misdirected log delivery, VIP blocks private and reserved IP ranges by default, so only publicly reachable syslog endpoints receive messages. Whitelisting a destination bypasses that default check for that address.

<Note>
  Whitelisting requires the `audit_log_syslog.ip_whitelisting` permission, which Futurex assigns. If an error arises, the permission is missing. Contact Futurex to resolve any permission errors.
</Note>

Perform the following steps to whitelist an IP address:

<Steps>
  <Step>
    On the **Syslog Server Configurations** page, select **\[ IP Whitelisting ]**.

    <Check>
      This brings up the **Ip Whitelisting** dialog, which lists any addresses already whitelisted for your account.
    </Check>

    <Frame caption="Ip Whitelisting dialog">
      <img src="https://mintcdn.com/futurex-a224dff3/-hbkrwNmn7U16Ny7/images/VirtuCrypt_Integrations/ip_whitelisting_dialog.png?fit=max&auto=format&n=-hbkrwNmn7U16Ny7&q=85&s=d18f26a9cb07435deb5d51290b731478" alt="Ip Whitelisting dialog" width="1325" height="685" data-path="images/VirtuCrypt_Integrations/ip_whitelisting_dialog.png" />
    </Frame>
  </Step>

  <Step>
    In the **Enter IP Address (in CIDR)** field, enter the destination address in CIDR notation, then add it to the list.
  </Step>
</Steps>

## How VIP checks destinations

When VIP sends a syslog message to a target server, it checks the destination as follows:

* If the server address is in the IP whitelist, VIP sends the message to the target server and skips the default block check.
* If the server address is not in the IP whitelist, VIP checks the address against its default block list of private and reserved ranges. VIP sends the message only if the address is publicly reachable.
