From 3444c1b59e7e3fb63547f0bcb9679a2e58ef4e9f Mon Sep 17 00:00:00 2001
From: Adrian Philipp <adrian@ticketswap.com>
Date: Wed, 18 Mar 2026 08:30:58 +0100
Subject: [PATCH] fix(conf): use published IP list for ChatGPT-User
 verification
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Switch from RDNS-based verification to OpenAI's published IP range
list. RDNS is unreliable for OpenAI bots — the official docs recommend
using the JSON IP list at openai.com/chatgpt-user.json.

The "google" parser is used because OpenAI's JSON uses the same format
as Google's IP range lists ({"prefixes": [{"ipv4Prefix": ...}]}).

Ref: https://developers.openai.com/api/docs/bots
---
 bots/conf.d/chatgpt-user.yaml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bots/conf.d/chatgpt-user.yaml b/bots/conf.d/chatgpt-user.yaml
index c6de7fe..69c342a 100644
--- a/bots/conf.d/chatgpt-user.yaml
+++ b/bots/conf.d/chatgpt-user.yaml
@@ -1,8 +1,9 @@
 # OpenAI ChatGPT user agent
-# https://developers.cloudflare.com/bots/concepts/bot/verified-bots/
+# https://developers.openai.com/api/docs/bots
 kind: AIAssist
 name: chatgpt-user
+# OpenAI uses the same JSON format as Google ({"prefixes": [{"ipv4Prefix": ...}]})
+parser: google
 ua: "ChatGPT-User"
-rdns: true
-domains:
-  - "openai.com"
+urls:
+  - "https://openai.com/chatgpt-user.json"