Iphone exchange active synch.

[Phonebuff]

Good Morning all,

I have a customer on AT&T Cellular using iPhone with exchange active synch.  To enable this we opened port 443 (https) to the server and it works well I guess.  But I would like it to be a little less open.

So, until I can get them on a PPTP  I have two questions.

Is the source port also 443 or do I need (*) ?

Does anyone know the IP range to white list just AT&T Cellular phones in the US ?

TIA,

[cmb]

Source port has to be any (or at least 1024-65535). Getting a list of all of AT&T's IP space would take a whole lot of time, not aware of any such list, but you could build one by spending a ton of time on arin.net.