Users must ensure that the firewall rules for Address Manager and the primary BlueCat DNS/DHCP Server allow for the following network traffic:
- Address Manager requests to the Cloud DNS provider API server (outbound port 443):
api.cloudflare.com
- AXFR/IXFR zone transfer requests from the Cloud DNS secondaries to the primary BlueCat
DNS/DHCP Server originating from the following ranges (inbound TCP/UDP 53):
198.41.144.240/28 198.41.150.240/28 2a06:98c0:3601::/48 2a06:98c0:1401::/48
- DNS NOTIFY messages sent from the primary BlueCat DNS/DHCP Server to the Cloud DNS
secondaries at the following IP addresses (outbound UDP 53):
172.65.30.82 172.65.50.145 2606:4700:60:0:317:26ee:3bdf:5774 2606:4700:60:0:35a:4be3:4144:c5ee