# Network port and URL used by Homey to acccess Insight through firewall **URL:** \ **Category:** Questions & Help\ **Created:** [September 26, 2022, 3:35pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469 "2022-09-26T15:35:31Z")\ **Posts on this page:** 14\ **Page:** 1
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 26, 2022, 3:35pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/1 "2022-09-26T15:35:31Z")
Hi all, I’m looking for the list oof ports and URL used by Homey to pass through a Firewall to go to Internet. I have a project to secure flows and connectivity from/to Internet with Homey and I need exclude URL in my firewall. For example, Insight is not working, but controlling homey from the web is OK. Something wrong and i don’t see some relevant information from firewall logs. ex : LAN \> **Homey** \> Firewall \> Router \> Internet = Insight FAIL LAN \> Firewall \> **Homey** \> Router \> Internet = Insight OK Thanks in advance. ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 26, 2022, 4:18pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/2 "2022-09-26T16:18:26Z")
> [@JF\_Castanier](#): > > For example, Insight is not working, but controlling homey from the web is OK. But Insights is part of the web app? What is your browser’s developer console saying? ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 26, 2022, 5:05pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/3 "2022-09-26T17:05:27Z")
From Homey Insight, history in nor recorded. Below an example with values from “public” network and after changing wifi to a secured LAN : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/b/6/b6c4a9fb59620b76f2e722a5c8692bda6631c648.png) Only the last entry is recorded without history. Dev tools console extract : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/1/f/1fc328fda02dda02afce597a7b48fdcd9a3c6692.png) ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/b/4/b4ac005f8cbb2a716c30d6bcfe81e60fb8282d53.png) ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 26, 2022, 5:11pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/4 "2022-09-26T17:11:03Z")
What are the URL’s for the working (white) and the non-working (red) preflight requests? It doesn’t really make sense that half seem to work and the other half don’t. ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 26, 2022, 5:31pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/5 "2022-09-26T17:31:50Z")
Sure, totally agree. The white URL ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/6/9/694da591f6eea6f835e6a10ff9981c338103ad15.png) The red URL : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/7/2/727335748ce38a0b0ae386ef90f14499036853da.png) I have no idea where to search. It’s like the order to record data is not able to make the SET. ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 26, 2022, 5:38pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/6 "2022-09-26T17:38:28Z")
That’s the same URL, isn’t it? Also, the (regular) `xhr` request in the top screenshot also seems to be working as well (receiving 31K of data), so that doesn’t really make sense. No other errors (the `MaxListenersExceededWarning` isn’t relevant) in console? Also, any idea if your secured LAN setup prohibits external DNS’s from returning local network addresses? Because Homey relies on that “for safety” (to check, from inside your secured LAN network, try resolving the hostname `10-0-0-41.homey.homeylocal.com`; if it fails, your LAN setup doesn’t allow such lookups, which may partially cause the problem). ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 26, 2022, 7:53pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/7 "2022-09-26T19:53:11Z")
The 2 URL are the same. And I confirm the host `10-0-0-41.homey.homeylocal.com` is well resolved : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/d/9/d986aef06cb927a95a6678110001513d68d9a96b.png) I have seen this : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/3/d/3d7997fa73312fdd796e40936eba5ca0ff35372b.png) Then : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/7/d/7d7b7f449daa9bb8e38da0015a549a21ed378674.png) ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/9/9/9993bcc6f3a4a21afe431f69e43217f28d64501b.png) An idea, I don’t know if any link : [https://docs.oracle.com/cd/E55956\_01/doc.11123/user\_guide/content/general\_cors.html](https://docs.oracle.com/cd/E55956_01/doc.11123/user_guide/content/general_cors.html) The error mention something about CORS. I don’t think this may have an impact. Continuing my troubleshoot ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 27, 2022, 5:26am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/8 "2022-09-27T05:26:15Z")
> [@JF\_Castanier](#): > > And I confirm the host `10-0-0-41.homey.homeylocal.com` is well resolved : Ah, so not such a secured LAN after all 😉 The `ping` request failing is probably the frontend trying to determine how to contact Homey, either through the cloud, through a secured (TLS) local connection, or through an unsecured (plain HTTP) local connection. What I still don’t understand is that some of the `entry` requests are failing. Those are required for Insights to work. ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 27, 2022, 5:35am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/9 "2022-09-27T05:35:50Z")
> [@robertklep](#): > > Ah, so not such a secured LAN after all 😉 Sure ! you unmasked me 🙂 Anyway, I have tried with another browser (currently using Edge, and tested wityh Firefox), same behavior. If it can helps, my secure solution is a Sophos XG. I’m pretty sure it’s this appliance which causing the issue, but i don’t see any log or any things in relation with this issue, and which explain why the only last Insight entry is recorded and not history. ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 27, 2022, 6:03am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/10 "2022-09-27T06:03:35Z")
The URL’s that you need to allow are the ones you’ve already shown (the one starting with `10-10-` and the one in the `connect.athom.com` domain). ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 27, 2022, 6:39am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/11 "2022-09-27T06:39:21Z")
I have tried to exclude these url from any inspection/security, no success … Thanks @robertklep for your help. I will contact Athom support to try if they have another idea about this point. If I have any new elements I will post here. I hope you or another person reading this post can help me. Regards. ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 27, 2022, 6:44am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/12 "2022-09-27T06:44:30Z")
@robertklep do you think the broadcast address may have an impact ? ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/5/7/576da290776ef3b52460263f426414d9ebb7311b.png) ---
**Author:** ![robertklep](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/robertklep/32/160628_2.png) [@robertklep](https://community.homey.app/u/robertklep)\ **Post date:** [September 27, 2022, 6:47am UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/13 "2022-09-27T06:47:44Z")
No, that’s used for device discovery (Homey performs periodically performs a broadcast ping to fill its ARP table). ---
**Author:** ![JF\_Castanier](https://sea1.discourse-cdn.com/flex025/user_avatar/community.homey.app/jf_castanier/32/40435_2.png) [@JF\_Castanier](https://community.homey.app/u/JF_Castanier)\ **Post date:** [September 27, 2022, 11:12pm UTC](https://community.homey.app/t/network-port-and-url-used-by-homey-to-acccess-insight-through-firewall/69469/14 "2022-09-27T23:12:16Z")
Coming back with good news 🙂 First, I have replaced my current router (Sophos XG) with another one (Fortigate 30E). Same behavior. So this means the root cause is not the router, but something else in the network. I have 2 only other network appliance plugged to my network, the switch and a Pi-Hole (10.0.0.249). My eyes go to the Pi-Hole and after forcing the resolution of the name to point to the Pi-Hole, my previous tests was not good (DNS result with good value) because my DNS resolution is forwarded to other servers and the name resolution from Pi-Hole was wrong : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/0/e/0e4c1f0d89c90b14e5508da6081259118f147f6f.png) My bad, the previous test was not relevant. This is very strange because the Pi-Hole entry is good: ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/2/9/29dce875adf876d3ca7fcdd1fd69eaa836c52a87.png) But associated resolution was wrong … WHAT THE H\*\*\* ??? So I delete and recreate the DNS entry into the Pi-Hole and after flushdns cmd and reboot Homey, the resolution is ok : ![image](https://us1.discourse-cdn.com/flex025/uploads/athom/original/3X/4/6/46619222dc8302fed1620289fe6c72f8c70306c4.png) After that, all is working like a charm and Insight come back. To conclude, I confirm that `10-0-0-41.homey.homeylocal.com` must works and point to Homey. Thank you very much @robertklep for your help and for your time. Your focus on homeylocal url was the good resolution path, and I assume that my network environment is not “classic”, so I understand it can be difficult to troubleshoot. My case may serve others. I share my resolution for people in case same or similar behavior. Regards.