Alt-N Discussion Groups MDaemon Discussion Groups MDaemon Support Archive

Update URLs to add to firewall

Gia Luc

Newbie
Posts: 6

Gia Luc - 09:05am, Aug 18 2020

Hello,

I have just installed mdaemon v20 on a Windows Server 2019 box that sits behind a firewall. The firewall blocks all outbound access unless they match a specific "allow" rules. Can you let me know what urls/domains to add and the necessary protocal (http or https)? For example, I have added a rule to allow https outbound access to *.clamav.net and this seems to allow the ClamAV update to work.

Thank you.

Gia Luc - Aug 18, 2020 11:38 am (#1 Total: 2)

Gia Luc

Newbie
Posts: 6

Just to add to my original post, I am looking in particular for the URL that is used for updating the spam filter.

Replies to this message

David C (Aug 26, 2020 12:24 pm)

David C - Aug 26, 2020 12:24 pm (#2 Total: 2)

David C

Guru
Posts: 1411

Replying to: Gia Luc (Aug 18, 2020 11:38 am)

Just to add to my original post, I am looking in particular for the URL that is used for updating...

Following is information about all of the outbound network connections made by MDaemon.

AV Updates and MDaemon Updates:

You can set up this RSS feed to view a list of all IP address used by our CDN ("content distribution network"):

https://control.llnw.com/aportal/support/documentation/iprssfeed

The list of IP addresses changes periodically. The last change appears to be two days ago and the one before that was back in June. Not every IP address would be used to check for updates in your location. If you want to know the IP range used in your area, performing a WireShark packet capture could give you the IP address used. However, if there is a failure on those servers, one of the other IP ranges might be used.

Call Home Checks:

65.99.242.56

Spam Filter Updates:

This is the URL = sa-update.dnswl.org

These IPs have been used recently, but we are not sure about the IP range used by SpamAssassin:

116.203.4.105

78.47.167.123

Outbreak Protection:

84.39.153.0/24

103.5.198.0/24

216.163.176.0/20

Based on what I researched, those are the IP ranges used by Cyren.

As stated earlier in this post, you can install packet sniffing software on the computer on which MDaemon is running to view outbound network connections made by your copy of MDaemon. Following are two packet sniffing software packages:

Wireshark -- http://www.wireshark.org/

Microsoft Network Monitor 3.4 -- http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=4865

Please be aware that reading and interpreting packet capture logs is beyond the support boundaries of MDaemon Technical Support.

Hope that helps.