Steps to "Reload" "routedBypassRulesFile.json" file:
- Create an AWS bucket and place on it the "routedBypassRulesFile.json" file. See Examples below.
- Download the file to the CSC. Run Command "AWS-RunShellScript" on the CSC and do command:
wget <Your bucket file URL> -O /usr/local/etc/mhb-csc/routedBypassRulesFile.json |
- Run Document "MHB-CSC-Reload-Routed-Bypass-json" to apply the changes.
Example:
{ "routedBypassRules": [ { "description": "O365 Login URLs 1", "ipProtocol": "tcp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "20.190.128.0/18", "fromPort": "80", "toPort": "80" }, { "description": "O365 Login URLs 2", "ipProtocol": "tcp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "20.190.128.0/18", "fromPort": "443", "toPort": "443" }, { "description": "O365 Login URLs 3", "ipProtocol": "tcp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "40.126.0.0/18", "fromPort": "80", "toPort": "80" }, { "description": "portquiz.net", "ipProtocol": "tcp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "52.47.209.216/32", "fromPort": "80", "toPort": "80" }, { "description": "O365 Login URLs 4", "ipProtocol": "tcp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "40.126.0.0/18", "fromPort": "443", "toPort": "443" }, { "description": "Skype and Teams UDP 1", "ipProtocol": "udp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "13.107.64.0/18", "fromPort": "3478", "toPort": "3481" }, { "description": "Skype and Teams UDP 2", "ipProtocol": "udp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "52.112.0.0/14", "fromPort": "3478", "toPort": "3481" }, { "description": "Skype and Teams UDP 3", "ipProtocol": "udp", "sourceCirdIp": "0.0.0.0/0", "destinationCirdIp": "52.120.0.0/14", "fromPort": "3478", "toPort": "3481" } ] } |