question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

FAQ: Firewall setting for Event-driven User Surveys (EDUS)

See original GitHub issue

Where to find the issue

[Google/Android]: Firewall/Router configuration: CAUSE: 4000, error during web request, HTTP status 901 https://www.coronawarn.app/en/faq/#access-list

[Google/Android]: Firewall/Router Konfiguration: URSACHE: 4000, error during web request, HTTP status 901 https://www.coronawarn.app/de/faq/#access-list

Describe the issue

The domains listed in the Firewall advice (see links above) are:

  • *.coronawarn.app
  • *.t-online.de

The domain *.rki.de is not listed and it seems this is necessary for the Event-driven User Surveys (EDUS) according to the verbose logging I’m seeing in CWA Android 1.13.2 Logcat, which shows a configuration parameter surveyOnHighRiskUrl=https://befragungen.rki.de/CWABasisbefragung

The parameter is also to be seen in the server configuration file application.yaml.

Suggested change

Please check that access to https://befragungen.rki.de is necessary.

Add *.rki.de to the list of domains in

Also, test what happens if a firewall blocks access to this URL. If the error CAUSE: 4000, error during web request, HTTP status 901 is not the outcome, then it might be necessary to reword the document including the title.


Internal Tracking ID: EXPOSUREAPP-1906

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:9 (9 by maintainers)

github_iconTop GitHub Comments

2reactions
dsarkarcommented, Mar 6, 2021

@MikeMcC399 @Ein-Tim Thanks! We will bring this to the developers for clarification. So, in short:

For the RKI survey routers should include in their domains access-list (apparently we shall not use the word whitelist):

  • *.rki.de
  • *.howsmyssl.com

?

1reaction
dsarkarcommented, Mar 6, 2021

Internal Tracking ID: EXPOSUREAPP-1906

Read more comments on GitHub >

github_iconTop Results From Across the Web

Firewall - FAQ | Office of Information Technology
As a first step, the firewall implementation placed all computing devices in one of two zones based on the local need for inbound...
Read more >
A firewall policy is distinct from the information security ...
Based on the threats/concerns identified by departmental stakeholders, identify those that can be mitigated by a firewall.
Read more >
Lithium: Event-Driven Network Control - SMARTech
ABSTRACT. This paper introduces event-driven network control, a net- work control framework that makes networks easier to man-.
Read more >
Managing Windows Firewall with GPOs - UW IT Connect
Creating a GPO to enable Windows Firewall settings using GPMC.MSC. This particular example enables traffic to TCP port 8888 from all of UW ......
Read more >
A History and Survey of Network Firewalls - CS UNM
In this paper we will be concerned with firewalls in a more modern setting— computer networks. The predecessors to firewalls for network security...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found