Logout

Alt-N Discussion Groups > MDaemon Discussion Groups > MDaemon Support > Archive > Update URLs to add to firewall

 [F] Alt-N Discussion Groups  / MDaemon Discussion Groups  / MDaemon Support  / Archive  /

Update URLs to add to firewall

[Luc, Gia]
Gia Luc
Newbie
Newbie
Posts: 6
Gia Luc - 09:05am, Aug 18 2020

Hello,

I have just installed mdaemon v20 on a Windows Server 2019 box that sits behind a firewall. The firewall blocks all outbound access unless they match a specific "allow" rules. Can you let me know what urls/domains to add and the necessary protocal (http or https)? For example, I have added a rule to allow https outbound access to *.clamav.net and this seems to allow the ClamAV update to work.

Thank you.

  All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items

Gia Luc - Aug 18, 2020 11:38 am (#1 Total: 2)  

 

Photo of Author
Gia Luc
Newbie
Newbie
Posts: 6
Just to add to my original post, I am looking in particular for the URL that is used for updating the spam filter.

Replies to this message
  • David C (Aug 26, 2020 12:24 pm)


  • David C - Aug 26, 2020 12:24 pm (#2 Total: 2)  

     

    Photo of Author
    David C
    Guru
    Guru
    Posts: 1405
    Replying to: Gia Luc (Aug 18, 2020 11:38 am)
    Just to add to my original post, I am looking in particular for the URL that is used for updating...

    Following is information about all of the outbound network connections made by MDaemon.



    AV Updates and MDaemon Updates:

    You can set up this RSS feed to view a list of all IP address used by our CDN ("content distribution network"):

  • https://control.llnw.com/aportal/support/documentation/iprssfeed

    The list of IP addresses changes periodically. The last change appears to be two days ago and the one before that was back in June. Not every IP address would be used to check for updates in your location. If you want to know the IP range used in your area, performing a WireShark packet capture could give you the IP address used. However, if there is a failure on those servers, one of the other IP ranges might be used.



    Call Home Checks:

  • 65.99.242.56



    Spam Filter Updates:

    This is the URL = sa-update.dnswl.org

    These IPs have been used recently, but we are not sure about the IP range used by SpamAssassin:

  • 116.203.4.105
  • 78.47.167.123



    Outbreak Protection:

  • 84.39.153.0/24
  • 103.5.198.0/24
  • 216.163.176.0/20

    Based on what I researched, those are the IP ranges used by Cyren.



    As stated earlier in this post, you can install packet sniffing software on the computer on which MDaemon is running to view outbound network connections made by your copy of MDaemon. Following are two packet sniffing software packages:

  • Wireshark -- http://www.wireshark.org/
  • Microsoft Network Monitor 3.4 -- http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=4865

    Please be aware that reading and interpreting packet capture logs is beyond the support boundaries of MDaemon Technical Support.

    Hope that helps.



  •   All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items



     Content:

    Read New | Search

     Guest:

    Email to Admin



    You are visiting as a Guest user.