Firewall Rules info
- List of sites to add to firewall rules.
Apple devices
201405 from http://support.apple.com/kb/TS1379
itunes.apple.com -> 2.17.226.217 ax.itunes.apple.com albert.apple.com gs.apple.com
201405 http://support.apple.com/kb/HT3204
port tcp/80,443,5223 + bunch of udp apple.com
201405 http://support.apple.com/kb/TS4264 17.0.0.0/8
Unable to use Apple Push Notification service (APNs) Devices using APNs need a direct connection to Apple's server. TCP port 5223 (used by devices to communicate to the APNs servers) TCP port 2195 (used to send notifications to the APNs) TCP port 2196 (used by the APNs feedback service) TCP Port 443 (used as a fallback on Wi-fi only, when devices are unable to communicate to APNs on port 5223) The entire 17.0.0.0/8 address block is assigned to Apple, so it's best to allow this range in your firewall settings.
...