Firewall and IT requirements for Movement

Outlined below are firewall and IT requirements for Movement, which should be reviewed during onboarding:

General

Please allow emails from yourmovement.org, movement.industries and changelab.io domain names. These will be signed with DKIM and DMARC, and contain SPF headers.

Phone calling and text

To ensure that the phone calling and text message functionality of Movement works as intended, please unblock the following for users on your IT network, if you implement an allowlist approach in your firewall:

https://yourmovement.org on port 443
https://[client-subdomain].yourmovement.org on port 443
wss://ws.pusherapp.com on port 443
wss://ws-eu.pusher.com on port 443
https://sockjs.pusherapp.com on port 443
https://sockjs-eu.pusher.com on port 443
All IP ranges and ports specified under Dublin and Frankfurt on this page: https://www.twilio.com/docs/global-infrastructure/firewall-configurations/programmable-voice-sdks

Email

For any domains you would like to send, you’ll need to set up SPF, DKIM and DMARC records.

Please email support@yourmovement.org with the domain or subdomain you’d like to send emails from and we’ll provide you with the DNS records to add.