Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Firewall - Steam Client: Difference between revisions

Content deleted Content added
CrazyTeeka (talk | contribs)
CrazyTeeka (talk | contribs)
No edit summary
Line 44: Line 44:
<host name="steamcdn-a.akamaihd.net"
<host name="steamcdn-a.akamaihd.net"
ip="23.67.255.200 23.67.255.208 104.86.110.27 104.86.110.35"/>
ip="23.67.255.200 23.67.255.208 104.86.110.27 104.86.110.35"/>
<host name="steamcloud-dub.s3.amazonaws.com"
ip="54.231.134.106"/>
<host name="steamcloud-eu.storage.googleapis.com"
<host name="steamcloud-eu.storage.googleapis.com"
ip="216.58.198.208 216.58.198.240 216.58.213.112"/>
ip="216.58.198.208 216.58.198.240 216.58.213.112"/>
Line 72: Line 70:
<syntaxhighlight>
<syntaxhighlight>
<rule-set name="Steam Client: Outbound" source-interface="LAN" target-interface="pppoe" no-match-action="continue">
<rule-set name="Steam Client: Outbound" source-interface="LAN" target-interface="pppoe" no-match-action="continue">
<rule name="NTP"
<rule name="Steam OS: NTP"
target-port="123"
target-port="123"
protocol="17"
protocol="17"
action="accept"/>
action="accept"/>
<rule name="TCP"
<rule name="Steam Client: TCP"
target-port="27014-27050"
target-port="27014-27050"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="UDP"
<rule name="Steam Client: UDP"
target-port="3478 4379 4380 27000-27030"
target-port="3478 4379 4380 27000-27030"
protocol="17"
protocol="17"
action="accept"/>
action="accept"/>
<rule name="Akamai CDN"
<rule name="CDN: Akamai"
target-ip="23.63.98.0/23 23.67.255.0/24 23.195.64.0/20 23.205.212.0/22 92.122.218.0/23 104.71.176.0/20 104.86.110.0/23 173.223.176.0/20"
target-ip="23.63.98.0/23 23.67.255.0/24 23.195.64.0/20 23.205.212.0/22 92.122.218.0/23 104.71.176.0/20 104.86.110.0/23 173.223.176.0/20"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Google Cloud"
<rule name="CDN: Highwinds"
target-ip="216.58.213.112"
target-ip="205.185.216.10 205.185.216.42"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Highwinds CDN"
<rule name="CDN: Level 3"
target-ip="205.185.216.10 205.185.216.42"
target-ip="8.253.70.30 8.253.70.110 8.253.70.142 8.254.191.46 8.254.191.94 8.254.191.238 212.73.205.178"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Level3 CDN"
<rule name="Steam Cloud: Amazon Web Services"
target-ip="8.253.70.30 8.253.70.110 8.253.70.142 8.254.191.94 8.254.191.238 212.73.205.178"
target-ip="54.231.130.0/24 54.231.131.0/24 54.231.132.0/24 54.231.133.0/24 54.231.134.0/24 54.231.136.0/24 54.231.140.0/24 54.231.141.0/24 54.231.142.0/24"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Microsoft Cloud"
<rule name="Steam Cloud: Google Cloud Platform"
target-ip="104.40.183.236 168.61.57.78 168.61.58.14 191.235.193.40"
target-ip="216.58.198.208 216.58.198.240 216.58.213.112"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Paypal Payments"
<rule name="Steam Cloud: Microsoft Azure"
target-ip="66.235.148.64 66.235.148.128/31"
target-ip="104.40.183.236 168.61.57.78 168.61.58.14 191.235.193.40 191.238.8.26"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Telia Network"
<rule name="Paypal Payments"
target-ip="62.115.11.250 80.239.194.146"
target-ip="66.235.148.64 66.235.148.128/31"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
action="accept"/>
action="accept"/>
<rule name="Valve Software"
<rule name="Valve Software"
target-ip="103.10.124.0/24 146.66.155.0/24 155.133.245.0/24 155.133.248.0/24 162.254.192.0/22 162.254.196.0/23 162.254.198.0/32 205.196.6.0/24"
target-ip="103.10.124.0/24 146.66.155.0/24 155.133.245.0/24 155.133.248.0/24 162.254.192.0/22 162.254.196.0/23 162.254.198.0 205.196.6.0/24"
target-port="80 443"
target-port="80 443"
protocol="6"
protocol="6"
Line 135: Line 133:
<rule-set name="Steam Client: Inbound" target-interface="LAN" no-match-action="reject">
<rule-set name="Steam Client: Inbound" target-interface="LAN" no-match-action="reject">
<rule name="Allow Firebrick" source-interface="self"/>
<rule name="Allow Firebrick" source-interface="self"/>
<rule name="TCP" target-ip="217.169.11.114/31" target-port="27014-27050" protocol="6" action="accept"/>
<rule name="Steam Client: TCP" target-ip="217.169.11.114/31" target-port="27014-27050" protocol="6" action="accept"/>
<rule name="UDP" target-ip="217.169.11.114/31" target-port="3478 4379 4380 27000-27030" protocol="17" action="accept"/>
<rule name="Steam Client: UDP" target-ip="217.169.11.114/31" target-port="3478 4379 4380 27000-27030" protocol="17" action="accept"/>
</rule-set>
</rule-set>
</syntaxhighlight>
</syntaxhighlight>
Line 152: Line 150:
*media4.steampowered.com = Akamai
*media4.steampowered.com = Akamai


Running steam will download a small file from http://client-download.steampowered.com/client/ containing a list of files with SHA-1 checksum and size in bytes to check if steam is up to date.
Running steam will download a small file from client-download.steampowered.com containing a list of files with SHA-1 checksum and size in bytes to check if steam is up to date.


If steam is outdated, it will need to download the updated files by randomly selecting one of the CDN hosts and that host will be used to serve the files.
If steam is outdated, it will need to download the updated files by randomly selecting one of the CDN hosts and that host will be used to serve the files.