
04-01-2009, 02:48 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,238
|
|
KB16378 - How to allow enterprise activation traffic for a BES behind a firewall
KB16378 - How to allow enterprise activation traffic for a BlackBerry Enterprise Server behind a firewall
Environment
- BlackBerry® Desktop Redirector
- BlackBerry® Enterprise Server
Overview
To allow enterprise activation traffic when the BlackBerry Enterprise Server or BlackBerry Desktop Redirector is behind a firewall, complete the following steps:
- On the firewall, verify that port 25 is open for inbound/outbound Transmission Control Protocol (TCP) traffic.
- On the firewall, verify that port 53 is open for inbound-initiated TCP traffic and User Datagram Protocol (UDP) traffic.
- Depending on the firewall interface, complete one of the following:
- If the firewall allows you to specify external host names, add blackberry.net as a sub domain.
- If the firewall allows you to specify external Internet Protocol (IP) addresses, add the following range of IP addresses to the allowed list:
| 206.51.26.0 / 24 | 255.255.255.0 | | 193.109.81.0 / 24 | 255.255.255.0 | | 204.187.87.0 / 24 | 255.255.255.0 | | 216.9.240.0 / 20 | 255.255.240.0 | | 93.186.16.0 / 20 | 255.255.240.0 | | 68.171.224.0 / 19 | 255.255.224.0 | | 206.53.144.0 / 20 | 255.255.240.0 | | 67.223.64.0 / 19 | 255.255.224.0 |
- If using Bogon Filters, make sure that the filters are up to date to prevent any unnecessary filtering of traffic on edge routers. For additional firewall and connection requirements for the BlackBerry Enterprise Server, see KB03735.
Additional Information
The IP addresses listed in the previous table are current as of the date of publication and are subject to change. If you require more information contact the BlackBerry® Technical Support Services.
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|