You need to allow traffic going to the following ip ranges:

You need to allow the following ports: