help whitelisting domains and unblocking ports

I have my modem in bridge mode which I assumed with mean no blacklisting or port blocking. Unfortunately my Ubiquity router will not connect to Ubiquity's remote access portal. Ubiquity says the logs show MQTT errors meaning Xfinity is blacklisting domains or blocking ports. The say I need the following domains whitelisted and the following ports unblocked, but I cann't find a way to contact Xfinity to do this. Has anyone been successful with this?

domains that need to be whitelisted:

turn.cloudflare.com
stun.cloudflare.com
sso.ui.com
cloudaccess.svc.ui.com
setup.svc.ui.com
cloudfront.net
amazonaws.com
*aws.com

Ports that need to be unblocked:

TCP/UDP	53	Both	DNS lookups for remote access, updates, and Guest Portal redirection (also required for UniFi Network)
UDP	123	Egress	NTP (time sync). Required for establishing secure connections
UDP	3478	Both	STUN for remote access (also required for UniFi Network)
TCP	443	Both	Remote Access service, application GUI/API access via web browser (also required for UniFi Network)
TCP	8883	Egress	Remote Access service
TCP	5349	Ingress	Remote access support

Responses

Oldest First

Selected Oldest First

XfinityVictor

Official Employee

•

1.8K Messages

1 month ago

user_ruv6y5 Hello, here is a link that provides steps on port forwarding https://www.xfinity.com/support/articles/xfi-port-forwarding. I hope it helps!

4

0

U

user_ruv6y5

Visitor

•

3 Messages

Thanks, this is how you do it when your modem is not set to bridge mode. For the service I am trying to use to work I need a external address and the ports open. Bridge mode is needed to give me the external address.

Like

Reply

1 month ago

0

XfinityJeff

Official Employee

•

421 Messages

@user_ruv6y5 have you tried using the modem admin tool? You can access the tool by opening a web browser and going to 10.0.0.1 and logging in with the default username of admin and the password that is printed on the sticker on the modem?

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer. tick

Like

Reply

1 month ago

0

U

user_ruv6y5

Visitor

•

3 Messages

No it was not answered.

Like

Reply

1 month ago

0

XfinityJeff

Official Employee

•

421 Messages

Good morning @user_ruv6y5. We can take a look at the account and see what we can do. Could you please send our team a direct message with your full name and full address?
To send a direct message:
Click "Sign In" if necessary
• Click the "Direct Message chat" icon
• Click the "New message" (pencil and paper) icon
• Type "Xfinity Support" in the "To:" line and select "Xfinity Support" from the drop-down list which appears. The "Xfinity Support" graphic replaces the "To:" line
• Type your message in the text area near the bottom of the window, please add your full name and address
• Press Enter to send it

I am an Official Xfinity Employee.
Official Employees are from multiple teams within Xfinity: CARE, Product, Leadership.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Please, mark a reply as the Accepted Answer. tick

Like

Reply

1 month ago

0

EG

Expert

•

114.7K Messages

1 month ago

user_ruv6y5 @XfinityJeff

Please circle back here and post any possible solutions for the issue here in these open public forums so that all readers here may benefit from the exchange / info. This is in keeping with the spirit for which these public help forums were originally intended. Thank you.

0

Your Home Network

user_ruv6y5

help whitelisting domains and unblocking ports

XfinityVictor

user_ruv6y5

XfinityJeff

user_ruv6y5

XfinityJeff

EG

New to the Community?