# How to Create Trusted Outgoing Webhooks

**URL:** <https://forum.mattermost.com/t/how-to-create-trusted-outgoing-webhooks/4012>\
**Category:** Troubleshooting\
**Created:** [October 26, 2017, 4:11pm UTC](https://forum.mattermost.com/t/how-to-create-trusted-outgoing-webhooks/4012 "2017-10-26T16:11:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![maddawgx9](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/maddawgx9/32/882_2.png) [@maddawgx9](https://forum.mattermost.com/u/maddawgx9)\
**Post date:** [October 26, 2017, 4:11pm UTC](https://forum.mattermost.com/t/how-to-create-trusted-outgoing-webhooks/4012/1 "2017-10-26T16:11:03Z")

</div>

Is there a way to have a trusted outgoing webhook? I have a webhook that is going to an https url that has a RapidSSL certificate (not self-signed), but the error log keeps telling me:

[EROR] Event POST failed, err=Post [https://myurl.com](https://myurl.com): address forbidden

is there something i need to do on the mattermost server to allow this cert to be trusted?

---

<div class="post-metadata">

**Author:** ![maddawgx9](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/maddawgx9/32/882_2.png) [@maddawgx9](https://forum.mattermost.com/u/maddawgx9)\
**Post date:** [October 26, 2017, 5:43pm UTC](https://forum.mattermost.com/t/how-to-create-trusted-outgoing-webhooks/4012/2 "2017-10-26T17:43:14Z")

</div>

To be more specific. The integration server and the mattermost server are on the same network. However, both are exposed to the internet. Whitelisting the integration server with “AllowedUntrustedInternalConnections” solves this issue; however, that seems silly and there should be a better solution.

---

<div class="post-metadata">

**Author:** ![MusikPolice](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/musikpolice/32/1451_2.png) [@MusikPolice](https://forum.mattermost.com/u/MusikPolice)\
**Post date:** [October 30, 2017, 12:29pm UTC](https://forum.mattermost.com/t/how-to-create-trusted-outgoing-webhooks/4012/3 "2017-10-30T12:29:22Z")

</div>

Mattermost blocks access to insecure addresses by default. You should be able to disable this behaviour by setting the EnableInsecureOutgoingConnections config flag to true. If your server is exposed to the wider internet though, whitelisting the specific addresses that you need to be able to access is likely the better option. You can see the details of our HTTP implementation [here](https://github.com/mattermost/mattermost-server/blob/master/utils/httpclient.go).