# Firewall rules for SMT

**URL:** https://forums.suse.com/t/firewall-rules-for-smt/34338
**Category:** Azure
**Created:** [September 5, 2019, 11:49pm UTC](https://forums.suse.com/t/firewall-rules-for-smt/34338 "2019-09-05T23:49:39Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![ux3adidas](https://avatars.discourse-cdn.com/v4/letter/u/45deac/32.png) [@ux3adidas](https://forums.suse.com/u/ux3adidas)
#### Post date: [September 5, 2019, 11:49pm UTC](https://forums.suse.com/t/firewall-rules-for-smt/34338/1 "2019-09-05T23:49:39Z")

</div>

What IPs/subnets should we enable on our firewalls to have access to the Azure SMT servers?  
I see these 2 lines in /etc/hosts on one of the servers, but I’m not sure what are all possible IPs for the SMT…

[CODE]# Added by SMT registration do not remove, retain comment as well  
20.186.88.79 [smt-azure.susecloud.net](http://smt-azure.susecloud.net) smt-azure

# Added by SMT registration do not remove, retain comment as well

20.186.112.116 [smt-azure.susecloud.net](http://smt-azure.susecloud.net) smt-azure  
[/CODE]

---

<div class="post-metadata">

### Author: ![ikapelyukhin](https://avatars.discourse-cdn.com/v4/letter/i/cdc98d/32.png) [@ikapelyukhin](https://forums.suse.com/u/ikapelyukhin)
#### Post date: [September 16, 2019, 1:24pm UTC](https://forums.suse.com/t/firewall-rules-for-smt/34338/2 "2019-09-16T13:24:13Z")

</div>

Hello,

Please refer to this blog post: [https://www.suse.com/c/riddle-me-this/](https://www.suse.com/c/riddle-me-this/)  
You can get the list of all registration server IPs by running: `pint microsoft servers --smt`

HTH, Ivan.

---

<div class="post-metadata">

### Author: ![ux3adidas](https://avatars.discourse-cdn.com/v4/letter/u/45deac/32.png) [@ux3adidas](https://forums.suse.com/u/ux3adidas)
#### Post date: [November 25, 2019, 5:36pm UTC](https://forums.suse.com/t/firewall-rules-for-smt/34338/3 "2019-11-25T17:36:37Z")

</div>

Thanks for the info. That query doesn’t return anything for Azure US Gov regions. Does that mean you don’t have separate SMT servers for those?
