ip & port of external mongodb server
hello developers, i asked a host provider about how to deploy my node.js/mongdb app, where my mongodb is hosted on atlas. they answered that they want to know the ip and port of external mongodb server in order to whitelist outgoing firewall exceptions at their firewall. how can i find the ip and …
hi [@petridis\_panagiotis](/community/forums/u/petridis_panagiotis),

how can i find the ip and port of my database hosted in mongo atlas?

regarding the ports, you may find the [troubleshoot connection issues](https://docs.atlas.mongodb.com/troubleshoot-connection/#attempting-to-connect-to-a-cluster-from-behind-a-firewall) documentation useful, more specifically the following:

atlas clusters operate on port 27017 . you must be able to reach this port to…
sorry i took so long to respond on this post. i’ve had a busy week! so i found the issue. in my template for endpoints i realized i accidentally set them to provision using the external ip address of my pbx. changed it to internal and this fixed my issues :stuck\_out\_tongue: you have to forward the sip and rtp ports of the snom. (before the update this was done by a sip application layer gateway, but we had to remove this because it breaks security.)

[image]

[security announcement: mitigating nat slipstreaming - the ipfire blog](https://blog.ipfire.org/post/security-announcement-mitigating-nat-slipstreaming)

last autumn, we learned about … you could use on-demand tls with local certs if you don’t know ahead of time which ip the request will come from:

tls internal {

on\_demand

}

[image]

[tls (caddyfile directive) - caddy documentation](https://caddyserver.com/docs/caddyfile/directives/tls)

caddy is a powerful, enterprise-ready, open source web server with automatic https writ… first of all, you need to check if you are using a self-signed certificate.

if so, you have to accept it first: double-clicked on the request in the network pane, and ow prompted you whether you wanted to accept the certificate.

other option will be to use the [overwolf.web.sendhttprequest()](http://developers.overwolf.com/documentation/sdk/overwolf/web/#sendhttprequest) funct… In the server configuration document, in the Router/SMTP section, tab Restrictions and controls|SMTP Outbound controls, there is a parameter ‘Allow messages only from the following Notes addresses to be sent to the Internet:’. List the allowed names there, to prevent the others from sending mail to the Internet. Otherway, if there is an Active session exist on the firewall, you may grab the session ID and see detailed info as mentioned below:

> show session all filter source x.x.x.x destination y.y.y.y

**9936**         dns            ACTIVE  FLOW  NS   100.100.100.1[53621]/trust-L3/17  (1.1.1.2[43506])

vsys1                                          8.8.8.4[53]/untrust-L3  (8.8.8.4[53])

admin@31-PA-3020> show session id 9936

Session            9936

        c2s flow:

                source:      100.100.100.1 [trust-L3]

                dst:         8.8.8.4

                proto:       17

                sport:       53621           dport:      53

                state:       ACTIVE          type:       FLOW

                src user:    plano2003\csharma  >>>>>>>>>>>>>>> Source User

                dst user:    unknown

        s2c flow:

                source:      8.8.8.4 [untrust-L3]

                dst:         1.1.1.2

                proto:       17

                sport:       53              dport:      43506

                state:       ACTIVE          type:       FLOW

                src user:    unknown

                dst user:    plano2003\csharma

        start time                    : Thu Jul 24 12:33:04 2014

        timeout                       : 30 sec

        time to live                  : 12 sec

        total byte count(c2s)         : 240

        total byte count(s2c)         : 0

        layer7 packet count(c2s)      : 3

        layer7 packet count(s2c)      : 0

        vsys                          : vsys1

        application                   : dns

        rule                          : trust-to-untrust  >>>>>>> Security rule

        session to be logged at end   : True

        session in session ager       : True

        session synced from HA peer   : False

        address/port translation      : source + destination

        nat-rule                      : nat-inside-2-outside(vsys1) >>>>>>>>>>>>>> NAT policy name

        layer7 processing             : enabled

        URL filtering enabled         : True

        URL category                  : any

        session via syn-cookies       : False

        session terminated on host    : False

        session traverses tunnel      : True

        captive portal session        : False

        ingress interface             : tunnel.1  >>>>>>>>>>>>>> Incoming interface

        egress interface              : ethernet1/3  >>>>>>>>>>>>>>>> Outgoing interface

        session QoS rule              : N/A (class 4)

Thanks




[View solution in original post](/t5/general-topics/logs/m-p/33969#M24908) You will want to look at the httpwebrequest class and its methods. You can feed it a URL and get back the source (page) to do with as you will. The MSDN articles that come up of you google httpwebrequest will help you. ok so you can crate a firewall rule as follows:

soucre = internal network
service= tcp 9000 (you will need to create the definition)
destination = 128.194.162.30 (create either a host definition if it is always the same ip or dns host if it changes) [image] fournisseur:

first question : is cloudflare can block google bots ?

not by default.

[image] fournisseur:

so, i configure a firewall rule to block every ip adresse that is not french.

then you should extend that rule to exclude “known bots”.

(ip.geoip.country ne "fr" and not c… The question is can you get out of your computer and after that the thing to check is can you resolve any domain names. Try going to a command prompt and checking to see if you can ping your computers IP address then the gateway then try to resolve domain names.


ipconfig /all


Will give you the information you need to check these things.


nslookup google.com


If that does not come back with a IP address then you have problems with your DNS server.