Network is offline - IP/Port/Location filtering #1003
-
|
Hello, After several attack attempts, I was forced to reinforce my firewall settings. Since these modifications, the message “network is offline” is displayed when launching the Docker container. Since I haven't done any particular configuration on the container itself, and since it works fine without these new rules that I have to apply, could you please tell me which IP/Port and/or Location must be authorized in TCP and/or UDP to allow it to work? Thanks in advance |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
In general, ring-mqtt doesn't require any inbound connectivity, and only requires outbound connectivity to Ring servers on port 443, and to MQTT (whatever port your MQTT server is using, usually 1883 by default). I have no idea the IP address of Ring servers if that is what you are asking, and they could change at any time anyway as it is far more than a single server but pools of servers for both API and websocket connections, as well as auth and they use global load balancing so different regions resolve to different IPs. The only thing that requires any inbound services is video streaming, which needs the RTSP port open as well, but usually that would be open only on the local network, unless you are running with a public IP. The "network is offline" message is probably coming from isOnline package, which is a package used to detect if network connectivity is available before attempting to start the connection to Ring API. It determines if the connection is live by attempting to pull pages from various websites and performing DNS lookups, but it only needs one test to pass before it continues. You can read in detail it's requirements here: https://github.com/sindresorhus/is-online?tab=readme-ov-file#how-it-works |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the quick and accurate feedback. As a workaround, I deactivated my restriction, restarted the container to pass the is-online check and re-applied my restriction. Thanks a lot! |
Beta Was this translation helpful? Give feedback.
In general, ring-mqtt doesn't require any inbound connectivity, and only requires outbound connectivity to Ring servers on port 443, and to MQTT (whatever port your MQTT server is using, usually 1883 by default). I have no idea the IP address of Ring servers if that is what you are asking, and they could change at any time anyway as it is far more than a single server but pools of servers for both API and websocket connections, as well as auth and they use global load balancing so different regions resolve to different IPs.
The only thing that requires any inbound services is video streaming, which needs the RTSP port open as well, but usually that would be open only on the local network,…