GJ Software Products Posted December 27, 2022 Posted December 27, 2022 What ports (and IP addresses if available) do I need to allow outbound connections through my firewall from the eisy to the Internet on/to?
Techman Posted December 27, 2022 Posted December 27, 2022 Usually, Port 587 with TLS checked. It may vary depending on your email provider. If you reserve an IP address on your router for your controller then you would enter that IP address in the controller,
Bumbershoot Posted December 27, 2022 Posted December 27, 2022 20 minutes ago, GJ Software Products said: What ports (and IP addresses if available) do I need to allow outbound connections through my firewall from the eisy to the Internet on/to? I don't have an eisy, but for Polisy the ports are 8080 for http connections and 8443 for https connections (look on your Configuration | System tab in the AC). Lots of people here use the UDI Portal for that purpose so they don't have to open their firewall.
GJ Software Products Posted December 27, 2022 Author Posted December 27, 2022 41 minutes ago, Techman said: Usually, Port 587 with TLS checked. It may vary depending on your email provider. If you reserve an IP address on your router for your controller then you would enter that IP address in the controller, Yea definitely 587 for secure SMTP if your e-mail provider requires secure e-mail (which mine does). Thanks
GJ Software Products Posted December 27, 2022 Author Posted December 27, 2022 41 minutes ago, Bumbershoot said: I don't have an eisy, but for Polisy the ports are 8080 for http connections and 8443 for https connections (look on your Configuration | System tab in the AC). Lots of people here use the UDI Portal for that purpose so they don't have to open their firewall. 8080 &8443 for inbound, I'd expect 123 for outbound NTP, 587 as @Techmanmentions, but I believe there's also outbound connection to the Portal. I believe Michael told me that the Portal is not inbound to the eisy but the eisy maintains (opens) the connection to the portal. I got any outbound connections blocked, I'll see what shows up in the firewall logs... Thanks.
GJ Software Products Posted December 28, 2022 Author Posted December 28, 2022 (edited) I just saw UDP 53, DNS; UDP 123, NTP, and TCP 587 Secure E-Mail in the firewall log, opened those and haven't gotten any more drops. I'll keep an eye on it and post here if more show up... Edited December 28, 2022 by GJ Software Products
GJ Software Products Posted December 28, 2022 Author Posted December 28, 2022 Looks like it talks to an AWS EC2 instance on TCP 443 for the Portal. I'm having trouble determining a CIDR block and although there's a FQDN option in my firewall I don't know how that'll work. Plus I guess I'd have to get the FQDN out of the DNS packet. Never tried that before...
GJ Software Products Posted December 31, 2022 Author Posted December 31, 2022 Looks like it needs Cloudfront for updating. Another CIDR block... 18.155.200.0/21
Recommended Posts