Remember outgoing only is needed. Though I believe you want to do it by the various IPs.
Assuming hdawg's post from 4/09 is still accurate (can't think of any changes since then), this should help. http://www.port3101.org/featured-blackberry-kb-articles/793-kb03735-firewall-connection-requirements-blackberry-enterprise-server.html ________________________________ From: bes-admins-boun...@dataoutages.com [mailto:bes-admins-boun...@dataoutages.com] On Behalf Of Art Alexion Sent: Thursday, September 02, 2010 1:47 PM To: 'A list for BES Admin's to discuss issues, etc.' Subject: Re: [Bes-admins] Firewall problem Yeah. Its port 3101 . bbsrptest failed. Output: NetworkAccessNode is srp.us.blackberry.net. Attempting to connect to srp.us.blackberry.net (204.187.87.33), port 3101 connect() failed: Connection refused (10061) Gotta open up the port to that address in the firewall. Thanks. -- Art Alexion Systems Engineer -- Infrastructure Engineering Group Resources for Human Development [cid:076455317@02092010-3053] From: bes-admins-boun...@dataoutages.com [mailto:bes-admins-boun...@dataoutages.com] On Behalf Of hdawg Sent: Thursday, September 02, 2010 1:00 PM To: bes-admins@dataoutages.com Subject: Re: [Bes-admins] Firewall problem ROUT log file or the ALRT log file. telnet to srp.na.blackberry.net on port 3101 or try bbsrptest on the bes http://www.port3101.org/featured-blackberry-kb-articles/793-kb03735-firewall-connection-requirements-blackberry-enterprise-server.html From: bes-admins-boun...@dataoutages.com [mailto:bes-admins-boun...@dataoutages.com] On Behalf Of Art Alexion Sent: Thursday, September 02, 2010 12:55 PM To: bes-admins@dataoutages.com Subject: [Bes-admins] Firewall problem We installed a new firewall this morning, and BES mail push stopped. Looks like BES is communicating with Exchange, but not with the outside world. I'm told port 3101 is open, but can't confirm at this point. Is there a log I can look at which might provide some clues? -- Art Alexion Systems Engineer -- Infrastructure Engineering Group Resources for Human Development [cid:076455317@02092010-3053] NOTICE: This electronic mail transmission from the law firm of Dinsmore & Shohl may constitute an attorney-client communication that is privileged at law. It is not intended for transmission to, or receipt by, any unauthorized persons. If you have received this electronic mail transmission in error, please delete it from your system without copying it, and notify the sender by reply e-mail, so that our address record can be corrected.
<<inline: image001.jpg>>
_______________________________________________ Bes-Admins mailing list Bes-Admins@dataoutages.com http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins --------------------------------- Bes-Admins mailing list is sponsored by Dataoutagenews.com. http://www.dataoutagenews.com