# cURL error 28 with Connect / Geo Firewall

**URL:** https://forums.vitalpbx.org/t/curl-error-28-with-connect-geo-firewall/2425
**Category:** VitalPBX 4
**Created:** [February 27, 2023, 10:23pm UTC](https://forums.vitalpbx.org/t/curl-error-28-with-connect-geo-firewall/2425 "2023-02-27T22:23:23Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Darr](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/d/7993a0/32.png) [@Darr](https://forums.vitalpbx.org/u/Darr)
#### Post date: [February 27, 2023, 10:23pm UTC](https://forums.vitalpbx.org/t/curl-error-28-with-connect-geo-firewall/2425/1 "2023-02-27T22:23:23Z")

</div>

I keep getting a Curl error 28 when attempting to register a Connect mobile. I have tried from both Android and IOS device. I have tried using static IP as well as the FQDN. Always the same error. I have also confirmed that ports 3500/3501 are open on the firewall.

After further investigation if I disable the Geo Firewall I am able to provision the Connect app.

Confirmed it is the Geo Firewall. I only open US and Canada. When enabled unable to provision or connect, when disabled everything works,

---

<div class="post-metadata">

### Author: ![CoralKangaroo](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/c/edb3f5/32.png) [@CoralKangaroo](https://forums.vitalpbx.org/u/CoralKangaroo)
#### Post date: [April 16, 2024, 10:53pm UTC](https://forums.vitalpbx.org/t/curl-error-28-with-connect-geo-firewall/2425/2 "2024-04-16T22:53:17Z")

</div>

Hi Darr

Thanks for the post, very helpful.

I was trying to solve this problem, found your post, and it was indeed caused by the Geo Firewall. I am surprised there were no updates to this, as this still appears to be an issue one year on.

It looks like you can provision the VitalPBX Connect app if the Geo Firewall is disabled. It looks like you can re-enable it afterwards and the mobile client will continue to work.

Anyone at the VitalPBX team replicated this?

Thanks

---

<div class="post-metadata">

### Author: ![CoralKangaroo](https://forums.vitalpbx.org/letter_avatar_proxy/v4/letter/c/edb3f5/32.png) [@CoralKangaroo](https://forums.vitalpbx.org/u/CoralKangaroo)
#### Post date: [June 27, 2024, 8:40pm UTC](https://forums.vitalpbx.org/t/curl-error-28-with-connect-geo-firewall/2425/3 "2024-06-27T20:40:49Z")

</div>

For anyone who happens to stumble into this post, the answer is to whitelist the provisioning server and push server IPs, documented here:

> [@VitalPBX Connect Provisioning/Push Server List](https://forums.vitalpbx.org/t/vitalpbx-connect-provisioning-push-server-list/2888):
>
> Provisioning server (USA). 198.71.61.43 The current push Server list of IPs (both IPv4 and IPv6) follows: 159.65.167.207 159.65.186.176 159.65.251.173 159.65.252.186 159.65.253.49 159.89.179.103 162.243.226.164 165.227.65.164 165.227.115.186 165.227.182.9 165.227.184.188 165.227.190.186 165.227.210.221 165.227.223.68 167.99.48.91 167.99.119.203 167.99.119.244 2604:a880:800:10::160:1 2604:a880:0:1010::d31:1001 2604:a880:800:a1::172e:b001 2604:a880:800:10::69d:5001 2604:a88…