# What is the address and port i have to allow in the firewall for an ansible server to connect to ansible galaxy? **URL:** \ **Category:** Get Help\ **Tags:** galaxy-ng\ **Created:** [December 15, 2023, 7:42am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918 "2023-12-15T07:42:22Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![goorooj](https://avatars.discourse-cdn.com/v4/letter/g/e9bcb4/32.png) [@goorooj](https://forum.ansible.com/u/goorooj)\ **Post date:** [December 15, 2023, 7:42am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/1 "2023-12-15T07:42:22Z")
Hello Forum, i was searching for a while now but ican only seem to find answers how to manage a firewall with ansible, but not how to set a firewall to allow an ansible server with blocked internet access to connect to galaxy to download modules. So, here ist the question: in my organisation i have to make a formal change request to the firewall team that includes address and ports to open. I have to put them into the form and then they will allow thos one server to access these ports on the given address. what is address and ports i have to fill in for my internal server to reach ansible galaxy? ---
**Author:** ![motorbass](https://avatars.discourse-cdn.com/v4/letter/m/13edae/32.png) [@motorbass](https://forum.ansible.com/u/motorbass)\ **Post date:** [December 15, 2023, 9:00am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/2 "2023-12-15T09:00:53Z")
Hi, simply just ask to open this FQDN `galaxy.ansible.com` on port 443 ---
**Author:** ![goorooj](https://avatars.discourse-cdn.com/v4/letter/g/e9bcb4/32.png) [@goorooj](https://forum.ansible.com/u/goorooj)\ **Post date:** [December 15, 2023, 9:05am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/3 "2023-12-15T09:05:17Z")
thank you, i will do that ---
**Author:** ![bbaassssiiee](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/bbaassssiiee/32/1927_2.png) [@bbaassssiiee](https://forum.ansible.com/u/bbaassssiiee)\ **Post date:** [January 5, 2024, 2:19pm UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/4 "2024-01-05T14:19:24Z")
Here are some IPs for that hostname, but we logged 52.216.44.234 (in AWS) and 169.254.169.254 (metadata) as well. Our policy is based on FQDNs, where is the documentation? DNS says [galaxy.ansible.com](http://galaxy.ansible.com) has address 104.26.1.234, 104.26.0.234, 172.67.68.251, 2606:4700:20::681a:1ea, 2606:4700:20::ac43:44fb, 2606:4700:20::681a:ea ---
**Author:** ![drodowic](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/drodowic/32/235_2.png) [@drodowic](https://forum.ansible.com/u/drodowic)\ **Post date:** [January 5, 2024, 2:49pm UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/5 "2024-01-05T14:49:41Z")
[galaxy.ansible.com:443](http://galaxy.ansible.com:443) utilizes Cloudflare which lists their range of IP’s here: [IP Ranges](https://www.cloudflare.com/ips/) Collections are stored and downloaded from AWS S3 via [ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.com:443](http://ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.com:443). Amazon lists their range of IP’s here: [https://ip-ranges.amazonaws.com/ip-ranges.json](https://ip-ranges.amazonaws.com/ip-ranges.json) ---
**Author:** ![bbaassssiiee](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/bbaassssiiee/32/1927_2.png) [@bbaassssiiee](https://forum.ansible.com/u/bbaassssiiee)\ **Post date:** [January 8, 2024, 8:44am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/6 "2024-01-08T08:44:04Z")
Enabling these FQDN in your proxy is sufficient to download collections: - `galaxy.ansible.com` - `ansible-galaxy-ng.s3.dualstack.us-east-1.amazonaws.com` ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [February 7, 2024, 8:44am UTC](https://forum.ansible.com/t/what-is-the-address-and-port-i-have-to-allow-in-the-firewall-for-an-ansible-server-to-connect-to-ansible-galaxy/2918/7 "2024-02-07T08:44:11Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.