Closed port 80, which IPs are needed to update the server?

[Foxhound]

Due to circumstances I have had to close port 80 today. I wanted to use the time that the server can now not be reached by the public to update it as its now not serving anything to the public.
However, I guess closing the port 80 (tcp in/out) is preventing me from downloading the updated files, which makes sense.

So, I am now adding IP's, which I see in the logs to which the server connects trying to download those update packages, to my allow list in CSF firewall hoping that will allow the downloads.
That seems to not be the solution to this.

I guess it should be possible to update the server (WHM, kernel, mysql) while port 80 is closed and allow only specific IP's.
Anyone here knows how to do this? Which IP's/ports do I need to allow in my firewall?


Thanks in advance for any help

 

[rpvw]

These docs should help:

How to Configure Your Firewall for cPanel Services - cPanel Knowledge Base - cPanel Documentation

How to Update Your System - cPanel Knowledge Base - cPanel Documentation

Also see:

Allowing cPanel updates with port 80 blocked

 

[Foxhound]

Thank you very much, that helped a lot!
Weird I did not find that topic in my own searches though.