EE WiFi Calling - IP Ranges

[Zoom7000]

EE seem to have changed their IP ranges for WiFi calling and so I need to get the new IP range unblocked on my LGfL firewall. Does anyone know the new range or is anyone able to do a packet capture on their own network to find out what IP ranges are?

 

I had this as the previous range on the firewall:

109.249.0.0/16

UDP 500, 4500

Edited September 15, 2023 by Zoom7000

[IonutZ]

Here is a list with the IP addresses used by some of UK providers:

WiFi Calling BT IPs

62.6.163.99, 81.131.31.229

 

WiFi Calling EE IPs

46.68.59.19, 46.68.57.32, 46.68.58.10

 

WiFi Calling O2 IPs

87.194.8.8, 87.194.9.8, 87.194.89.8

 

WiFi Calling Sky IPs

185.110.178.140, 185.110.178.77, 185.110.178.76, 185.110.178.141

 

WiFi Calling Three IPs

185.153.237.99

 

WiFi Calling Vodafone IPs

88.82.11.221, 88.82.11.208

 

 

And these are the instructions on how to find out others:

How to find out the IP addresses used for WiFi calling by different providers:

1. Go to https://www.mcc-mnc.com/ and type in "United Kingdom" in the search field. You will see all the UK networks in the list.

2. Find the network you need (we will use BT as an example")

3. Look for the MNC value(s) for the network. (we have 00, 08 and 76 for BT)

4. Go to https://www.nslookup.io/ and type in the following address in the "Domain name", but replace the numbers after mnc with the ones you found in previous step:

epdg.epc.mnc123.mcc234.pub.3gppnetwork.org

We replace mnc123 with mnc008 and then it becomes: epdg.epc.mnc008.mcc234.pub.3gppnetwork.org

5. Press "Find DNS records"

6. Do the same with the other MNC values.

7. The Ip addresses found are the ones you need to add to your firewall.

Edited November 8, 2023 by Zbarnea

[MatthewL]

Here are the host names for all the common UK operators, save messing around with IP's if your firewall allows FQDN's

 

epdg.epc.mnc030.mcc234.pub.3gppnetwork.org EE Limited ™

epdg.epc.mnc010.mcc234.pub.3gppnetwork.org Telefonica UK Limited

epdg.epc.mnc015.mcc234.pub.3gppnetwork.org Vodafone Limited

epdg.epc.mnc020.mcc234.pub.3gppnetwork.org Hutchison 3G UK Ltd

epdg.epc.mnc033.mcc234.pub.3gppnetwork.org EE Limited (Orange)

epdg.epc.mnc057.mcc234.pub.3gppnetwork.org Sky UK Limited

epdg.epc.mnc038.mcc234.pub.3gppnetwork.org Virgin Mobile Telecoms Limited

epdg.epc.mnc008.mcc234.pub.3gppnetwork.org BT OnePhone Limited

epdg.epc.mnc094.mcc235.pub.3gppnetwork.org Hutchison 3G UK Ltd

 

Ports I have are: 500, 4500, 5060, 5061, 123, 40283-59999.

[georgeescott]

An updated list for 2024 for the most popular UK operators:

 

[TABLE=width: 849]

[TR]

[TD]MCC[/TD]

[TD]MNC[/TD]

[TD]ISO[/TD]

[TD]Country[/TD]

[TD]Country Code[/TD]

[TD]Network[/TD]

[TD]3GPP Network Domain[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]0[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]BT Group[/TD]

[TD]epdg.epc.mnc000.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]76[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]BT Group[/TD]

[TD]epdg.epc.mnc076.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]8[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]BT OnePhone[/TD]

[TD]epdg.epc.mnc008.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]34[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]EE (Orange)[/TD]

[TD]epdg.epc.mnc030.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]30[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]EE/Everything Everywhere[/TD]

[TD]epdg.epc.mnc031.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]31[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]EE/Everything Everywhere[/TD]

[TD]epdg.epc.mnc032.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]32[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]EE/Everything Everywhere[/TD]

[TD]epdg.epc.mnc033.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]33[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]EE/Everything Everywhere[/TD]

[TD]epdg.epc.mnc299.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]299[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Failed Calls[/TD]

[TD]epdg.epc.mnc026.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]26[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Lycamobile[/TD]

[TD]epdg.epc.mnc051.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]51[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]now broadband[/TD]

[TD]epdg.epc.mnc002.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]2[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]O2[/TD]

[TD]epdg.epc.mnc010.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]10[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]O2[/TD]

[TD]epdg.epc.mnc011.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]11[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]O2[/TD]

[TD]epdg.epc.mnc034.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]57[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Sky[/TD]

[TD]epdg.epc.mnc057.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]16[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Talk Talk[/TD]

[TD]epdg.epc.mnc016.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]20[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Three[/TD]

[TD]epdg.epc.mnc020.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]94[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Three[/TD]

[TD]epdg.epc.mnc094.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]38[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Virgin Mobile[/TD]

[TD]epdg.epc.mnc038.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]7[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc007.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]15[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc015.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]77[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc077.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]89[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc089.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]91[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc091.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[TR]

[TD]234[/TD]

[TD]92[/TD]

[TD]gb[/TD]

[TD]United Kingdom [/TD]

[TD]44[/TD]

[TD]Vodafone[/TD]

[TD]epdg.epc.mnc092.mcc234.pub.3gppnetwork.org[/TD]

[/TR]

[/TABLE]

 

 

If your firewall supports it you could probably just do epdg.epc.mnc*.mcc234.pub.3gppnetwork.org or *.mcc234.pub.3gppnetwork.org.

[Monkii]

Afternoon All,

 

I don't suppose anyone is aware of any further updates to this as we have some devices on site no longer connecting to Wi-Fi Calling but it was all working correctly for all users until very recently, has there been another addition of IP's that the mobile providers haven't shared

[MatthewL]

Are you using hostname over IP?

 

Are you allowing VPN protocols to those IP's?

 

What do your firewall logs say?

[Monkii]

Thanks for responding, the weird thing is that the issue is with Apple devices, which if you connect them via a 4G Wi-Fi hub, Wi-Fi calling works. 

 

We use Smoothwall so have setup categories and added the IP's/Ports that are required for it to work, and for me it works fine on Android, the issue seems to be with Apple. 

[NegativeKillDeath]

Randomized mac or IOS Private IP turned on?

[Monkii]

Ah yes, could be! I'll speak to the user and see if they have that turned on. 

[PaddyNewman]

21 hours ago, Monkii said:

Ah yes, could be! I'll speak to the user and see if they have that turned on. 

would also check you didn't incorrectly add an allow for icloud.com somewhere, that will allow the relay to just work and is suggested by Apple and some MDMs to just whitelist that domain. 

[Monkii]

We do have icloud.com whitelisted as we used to have iPads and JAMF but it's in been in place for years and the iPhones in question up until last week were connecting to Wi-Fi calls. It's a weird one as we haven't changed anything our side.

[PaddyNewman]

Id potentially be blocking the mask addresses for the relay if you have a domain whitelist. It will play havoc with various bits.