M-Series Firewall Rules
Overview
This document describes the firewall rules that must be in place should customers elect to utilize MarketSpark M-Series equipment across their Ethernet / Data networks.
When MarketSpark M-Series equipment is utilized in its primary, standard fashion - across our cellular connection - these affordances do not need to be undertaken by customers.
Notice
Before any customer engagement involving the use of MarketSpark M-Series equipment across a customer’s Ethernet / Data network, the customer must ensure that the following firewall rules are in place. Without these rules in place, MarketSpark will be unable to properly deliver its service offering.
MarketSpark’s primary mode of operation is across our built-in cellular connection. When that connection is utilized, customers do not have to make these affordances.
Firewall Rules
Rules for M-Series solutions are shown in the following table:
Provider
| Service
| Domain
| IP
| Port
| Protocol
| Direction
| Description
|
|---|---|---|---|---|---|---|---|
General Use Settings | |||||||
| NTP | pool.ntp.org |
| 123 | UDP | Out | FQDN for Shared NTP |
| DNS |
| 1.1.1.1 | 53 | UDP | Out | All DNS services utilized |
| ICMP |
| 1.1.1.1 | n/a | ICMP | Out | ICMP Failure Checks for WAN Verification (may need to be allowed for ingress if ICMP is blocked by default) |
Voice Network | MarketSpark’s Soft Switch Infrastructure | ||||||
| Voice |
| 66.33.176.64/26 | 1024-65535 | UDP/TCP | In / Out | General Communications (Signaling and Media) |
Please ensure SIP-ALG is DISABLED on the provided Network | |||||||
ATA | |||||||
| Grandstream Services | *.gdms.cloud |
| 443, 3478, 3479 | UDP/TCP | Out | Grandstream Services |
| Patton Specific NTP | *.patton.pool.ntp.org |
| 123 | UDP | Out | FQDN for Patton-specific NTP |
| Patton Services | *.patton.com |
| 443 | UDP/TCP | Out | Patton Services |
InHand Routers | |||||||
| InHand Services | *.inhandnetworks.com |
| 8883, 8200, 82, 83, 8443 | TCP | Out | InHand Services |
| InHand Specific NTP |
| 114.80.81.1 | 123 | UDP | Out | NTP for InHand Devices |
| InHand Connectivity Services | www.hostvpn.cloud |
|
| TCP/UDP | Out | Overlay Client for InHand Services |
Ericsson/Cradlepoint Routers | |||||||
| Ericsson/Cradlepoint Services | *.cradlepointecm.com |
| 443, 8001, 9099, 30000 | TCP |
| Ericsson/Cradlepoint Services |
| Ericsson/Cradlepoint Speedtest (netperf) | speedtest.net | N/A | 8080 | TCP/UDP | Out | Speedtest functionality |
| Ericsson/Cradlepoint Firmware | *.cloudfront.net |
| 443 | TCP | Out | Modem Firmware Accessibility |