Firewall Rules

IT and ICT Technicians: please call 01273 823 909 between 9.30am and 5pm, or email helpdesk@charanga.com if you have any technical questions about your content filters or firewall that aren't covered here.

Please add info@charanga.com and helpdesk@charanga.com to your global Safe Senders email list.

If you run a content-filtering firewall, you will need to ensure that in addition to standard web-content types, that you also allow the following file extensions through your firewall (these are all served via standard HTTP GETs on TCP port 80):

  • .eot (Embedded Open Type fonts)
  • .flv (Adobe Flash Video)
  • .mid (Midi audio)
  • .mp3 (MP3 audio)
  • .mp4 (MPEG video)
  • .swf (Adobe Flash)
  • .ttf (TrueType/OpenType fonts)
  • .woff (Web Open Font Format)

We make the assumption that you are already allowing the following standard and de-facto standard web filetypes through your firewall:

  • .css (Cascading Stylesheet)
  • .gif (GIF image)
  • .html (HTML files - and all text/html MIME type files)
  • .jpg (JPEG image)
  • .js (Javascript file)
  • .json (JavaScript Object Notation)
  • .pdf (Adobe PDF)
  • .png (PNG image)
  • .svg (Scalable Vector Graphic)
  • .xml (XML)

Content tests

Basic Content Tests (automated)

Our resources use a variety of different filetypes to drive them. School networks are often configured to block mp3, mp4 and occasionally midi files.

If some of the resources don't appear to be playing back audio or video, you can use this section to check for yourself if the school network is blocking mp3, mp4 or midi files.

  • Testing a sample mp3 file...
  • Testing a sample mp4 file...
  • Testing a sample swf file...
  • Testing a sample flv file...
  • Testing a sample midi file...

Comprehensive Content Tests

Click each of the following links and see if you see a "Content Blocked" style screen (in which case you'll need to unblock them) or if they play, download or open a media player, then there's no blocking going on.

When configuring computers for access to the website, please also consider user roles. The administrative login you may be using might have different permissions to a regular staff or pupil login. Teacher and pupil logins must be able to access all the file types listed on this page.

When you click the MP3, SWF, MP4 and midi file links, if you see a page saying Content blocked or Filetype disallowed or similar, then you will need to unblock the the following domains:

  • www.charangamusicworld.co.uk (if you're in the UK)
  • www.charangamusicworld.com (if you're in the US)
  • www.vipstudiosessions.co.uk
  • cdn.charanga.com
  • assets.charanga.com
  • assets0.charanga.com
  • assets1.charanga.com
  • assets2.charanga.com
  • assets3.charanga.com

You can test whether everything is configured correctly by visiting our browser-test page. You should see 4 green ticks and an animation. The last link on that page loads a sample resource. Click the link and check that the resource plays, or that the Shockwave Xtras install, along with the soundfont, and then that the resource loads.

If it doesn't load, you may need to check your firewall and any proxy filtering rules. The list of file-types above should all be permitted.

The xtras and soundfonts we currently serve are listed below, but we may add additional files in the future, so you should not limit your firewall filters to just these specific files or hostnames:

Lesson Viewer desktop application internet access

In addition to the website, teachers are able to access our content using our Lesson Viewer application for PCs and Macs.

The PC executable is lesson viewer.exe and the Mac version is lesson viewer.app

The purpose of the lesson viewer is so that teachers in classrooms with poor or no internet access can still present our content. They run the lesson viewer when they have an internet connection, e.g. at home or elswhere in the school, choose which resources they want to access, and then the application downloads these locally.

These resources are then stored within the lesson viewer, rather like iTunes does with audio and video content, and can be accessed for later viewing.

Please ensure that the lesson viewer.exe and lesson viewer.app processes are whitelisted for internet access, so they are able to fetch our resources from the internet, for later offline viewing.

Email filtering

We send out password reminders, login resets and other emails to our users using Amazon Web Services (AWS) Simple Email Service (AWS SES). All From: addresses are @charanga.com and our emails are SPF and DKIM signed. If you can add this domain to your email whitelist filters, then this will aid our support emails to your users. The sending mail servers are all hosts and subdomains of amazonses.com.

We send out newsletters and periodic updates about the service from the SMTP hosts createsend.com, cmail1.com, cmail2.com, cmail3.com, cmail4.com, cmail5.com. These are also SPF and DKIM signed.