Allow Mammoth through your firewall: IP address and ports

Which connectors need a firewall rule

These connectors connect directly to your systems. Their connection forms show a message with the IP address Mammoth connects from.

These connectors also connect out to a server you run, so allow Mammoth through your firewall for them too. Their connection forms don't show the IP address (see Find Mammoth's IP address).

Google BigQuery and Parquet (Azure) connect over standard HTTPS and don't need a firewall rule in typical set-ups. See their sections below if you restricted access on your side.

Find Mammoth's IP address

When you connect one of the connectors in the first table, the connection form shows the IP address Mammoth connects from:

• Database forms: "Please make sure IP 203.0.113.10 is whitelisted in your database settings."
• The SFTP form: "Mammoth connects from IP 203.0.113.10. Add it to your server's allowlist if needed."

(203.0.113.10 is an example; use the address your form shows.) For MQTT and Email (IMAP), copy the address from another connector's form in the same workspace, or ask Mammoth support.

Allow that IP address in your firewall before you click Connect. In the examples below, <MAMMOTH_IP> stands for the address shown on the form.

Allow Mammoth to reach PostgreSQL

1. Open your pg_hba.conf file (typically at /etc/postgresql/16/main/pg_hba.conf, where 16 is your version).

2. Add a line for Mammoth's IP:

   host    your_database    your_user    <MAMMOTH_IP>/32    md5
   

3. Reload PostgreSQL: sudo systemctl reload postgresql.

4. If the server is behind a cloud security group (AWS, GCP, Azure), also open port 5432 inbound from Mammoth's IP in the security group.

Connect PostgreSQL through an SSH tunnel

If your PostgreSQL server is reachable only through an SSH bastion host:

1. Open Connection options on the PostgreSQL form.
2. Tick Connect through an SSH tunnel.
3. Enter the SSH host, SSH port (default 22), SSH user, and a password or private key under SSH sign-in.

Mammoth then connects to the bastion, so allow Mammoth's IP on the bastion's SSH port instead of opening the database port. See the PostgreSQL connector.

Allow Mammoth to reach MySQL

1. Sign in to MySQL as an admin user.

2. Create a user that can connect from Mammoth's IP and grant it read access:

   CREATE USER IF NOT EXISTS 'your_user'@'<MAMMOTH_IP>' IDENTIFIED BY 'password';
   GRANT SELECT ON your_database.* TO 'your_user'@'<MAMMOTH_IP>';
   

3. Open port 3306 inbound in your firewall or cloud security group.

Allow Mammoth to reach SQL Server

1. Open SQL Server Configuration Manager.
2. Under SQL Server Network Configuration → Protocols, make sure TCP/IP is enabled.
3. In your firewall or Windows Firewall, add an inbound rule allowing port 1433 from Mammoth's IP.
4. For cloud-hosted instances (Azure SQL, AWS RDS), update the inbound security group rules too.

Allow Mammoth to reach MongoDB

1. Open your mongod.conf file.
2. Under net:, make sure bindIp allows connections from outside the host (or restrict access at the network level with a firewall).
3. Add an inbound rule allowing port 27017 from Mammoth's IP in your firewall or cloud security group.
4. Give your MongoDB user at least read access on the database.

Allow Mammoth to reach other databases and warehouses

Allow Mammoth to reach SFTP, Kafka, MQTT, IMAP and SendGrid

Use a custom port

If your database runs on a non-standard port, enter it in the Port field of the connection form, and make sure that port is open inbound from Mammoth's IP.

Test the connection after allowing the IP address

1. Fill in the connection form.
2. Click Connect.

Mammoth checks the credentials and saves the connection. If the check fails, the error message appears at the bottom of the form.

Troubleshooting firewall and network errors

For other connection problems, see Troubleshooting.

Related

• Connect a database or app: the connection form and connector workspace.
• Manage saved connections: health status and fixing a connection.
• Query a database and choose how it refreshes: what to do once you are connected.
• Security: how Mammoth protects your data.