## page was renamed from Security/FirewallRules
#format wiki
#language en
= Firewall Rules info =
 * List of sites to add to firewall rules.
=== Chrome Cast ===
 * !FireHol rules
   * client custom "chromecastudp"  udp/32768:61000 default accept
   * client custom "chromecast" tcp/8008:8009 default accept
   * '''server''' custom "ssdp" udp/1900 default accept dst 239.255.255.250/32 accept

=== Skype ===
 * 201502 no clear set of rules found to allow skype out, on a deny all firewall policy

=== Apple devices ===
  * 201405  from http://support.apple.com/kb/TS1379
    {{{
itunes.apple.com ->  2.17.226.217
ax.itunes.apple.com
albert.apple.com
gs.apple.com
     }}}
 * 201405 http://support.apple.com/kb/HT3204
     {{{
port tcp/80,443,5223 + bunch of udp
apple.com
   }}}
 * 201405 http://support.apple.com/kb/TS4264 '''17.0.0.0/8''' 
   {{{
Unable to use Apple Push Notification service (APNs)
Devices using APNs need a direct connection to Apple's server.
    TCP port 5223 (used by devices to communicate to the APNs servers) 
    TCP port 2195 (used to send notifications to the APNs)
    TCP port 2196 (used by the APNs feedback service)
    TCP Port 443 (used as a fallback on Wi-fi only, when devices are unable to communicate to APNs on port 5223)

The entire 17.0.0.0/8 address block is assigned to Apple, so it's best to allow this range in your firewall settings.
   }}}
=== Microsoft MSN 2014-06 ===
 * 207.46.106.127 , 132.245.193.21 , 132.245.193.21
 * msn.co.za  -  94.245.115.230
 * msn.com  -  65.55.206.228
 * http://support.microsoft.com/kb/927847 This article describes the various network ports that are required for Windows Live Messenger features to work
   * Remote Assistance	TCP 3389 TCP/UDP 49152 – 65535
   * Windows Live Call	TCP 443, 5061  UDP 5004 - 65525
   * Login.live.com
   * contacts.msn.com
   * storage.msn.com
   * c.msn.com
   * messenger.msn.com
   * g.msn.com
   * crl.microsoft.com
   * messenger.hotmail.com:1863
   * gateway.messenger.hotmail.com
   * config.messenger.msn.com
   * ows.messenger.msn.com
   * rsi.hotmail.com
   * sqm.microsoft.com
   * *.edge.messenger.live.com
   * relay.data.edge.messenger.live.com
   * rad.msn.com
   * appdirectory.messenger.msn.com
   * images.messenger.msn.com
   * spaces.live.com
   * relay.voice.messenger.msn.com

...
----
CategorySecurity