In this article
This article contains the IP addresses, URLs, and ports required for DNSFilter deployments to properly function. This is meant to be a starting point for allowing required traffic and is not an all-inclusive list; some features and functionality will require other addresses to be accessible.
DNSFilter requires connectivity to the Internet. The endpoints below should be reachable for customers using DNSFilter plans, including Whitelabel MSP customers.
| Topic | Addresses | Ports |
| Anycast IPv4 addresses for DNS queries, including DNS-over-TLS | 103.247.36.36 103.247.37.37 |
UDP: 53, 5353 TCP: 53, 5353 TCP: 853, 443 |
| Anycast IPv4 addresses for DNS queries (NAT IPs) | 103.247.36.101 - 106 103.247.37.101 - 106 | UDP: 53, 5353 TCP: 53, 5353 |
| Anycast IPv4 addresses for DNS queries with DNSSEC support | 103.247.36.9 103.247.37.9 | UDP: 53, 5353 TCP: 53, 5353 |
| Now in Pilot Testing: Anycast IPv6 addresses for DNS queries | 2402:5c40:5c40::3636 2402:5c40:5c41::3737 |
UDP: 53, 5353 TCP: 53, 5353 TCP: 853, 443 |
| Now in Pilot Testing: Anycast IPv6 address for DNS queries (NAT IPs) | 2402:5c40:5c40::3601 - 3607 2402:5c40:5c40::3701 - 3707 |
UDP: 53, 5353 TCP: 53, 5353 |
| Data Export IP addresses | 54.156.216.109 44.221.154.204 44.217.253.16 | |
| Roaming Client & Relay loopback listener. If these addresses are not available, the Roaming Client will use next available loopback address 127.0.0.1-4 | 127.0.0.1 (mac default) 127.0.0.2 (Windows default) |
UDP: 53 |
| Relay IP address Class A range | 10.0.0.0 - 10.255.255.255 Large networks (8 network bits / 24 host bits) |
|
| Relay IP address Class B range | 172.16.0.0 - 172.31.255.255 Medium networks (16 network bits / 16 host bits) |
|
| Relay IP address Class C range | 192.168.0.0 - 192.168.255.255 Small networks (24 network bits / 8 host bits) |
|
| Roaming Client & Relay auto-update | download.dnsfilter.com | TCP: 443 (HTTPS) |
| Roaming Client & Relay API | api.dnsfilter.com | TCP: 443 (HTTPS) |
| Roaming Client & Relay API for Whitelabel deployments - use the custom URL obtained from Support while whitelabeling the account. | api.<----------->.com | TCP: 443 (HTTPS) |
| DNSFilter Block Page | 45.54.28.9 -> .18 |
Comments
0 comments
Please sign in to leave a comment.