Firewall and IT requirements for Movement

General

Please allow emails from yourmovement.org, movement.industries and changelab.io domain names. These will be signed with DKIM and DMARC, and contain SPF headers.

Phone calling and SMS

To ensure that the phone calling and SMS functionality of Movement works as intended, please unblock the following for users on your IT network, if you implement a whitelist approach in your firewall.

https://yourmovement.org on port 443

https://[client-subdomain].yourmovement.org on port 443

wss://ws.pusherapp.com on port 443

wss://ws-eu.pusher.com on port 443

https://sockjs.pusherapp.com on port 443

https://sockjs-eu.pusher.com on port 443

All IP ranges and ports specified under Dublin and Frankfurt on this page: https://www.twilio.com/docs/global-infrastructure/firewall-configurations/programmable-voice-sdks

Email

For any domains you would like to send, you’ll need to set up SPF, DKIM and DMARC records.

Please email support@yourmovement.org with the domain or subdomain you’d like to send emails from and we’ll provide you with the DNS records to add.