Hi,
I'd like to block a device from accessing the internet, but still allow it to send/initiate apple push notifications.
port 2195 is used for apple push notifications and the address block for apple is 17.x.x.x
What I've done is created 2 network services filter black list rules.
For both rules, the source IP is the device to which I want internet access blocked. Then in the destination port range I have for one rule: 1:2194 and for the other rule 2196:65535. Source port range and destination IP are blank.
This works, in that I do receive the push notifications. But I am not sure if the is best way to go about accomplishing what I want?
I suppose ideally I could include the apple address block so that traffic from my device can only go to those IPs.
Any thoughts on what I've done? Or any suggestions if there is a better way to go about this?
I'd like to block a device from accessing the internet, but still allow it to send/initiate apple push notifications.
port 2195 is used for apple push notifications and the address block for apple is 17.x.x.x
What I've done is created 2 network services filter black list rules.
For both rules, the source IP is the device to which I want internet access blocked. Then in the destination port range I have for one rule: 1:2194 and for the other rule 2196:65535. Source port range and destination IP are blank.
This works, in that I do receive the push notifications. But I am not sure if the is best way to go about accomplishing what I want?
I suppose ideally I could include the apple address block so that traffic from my device can only go to those IPs.
Any thoughts on what I've done? Or any suggestions if there is a better way to go about this?
