getting updates through the firewall

i have a firewall on the web server that is making it difficult to auto-update. is there an ip address from which updates come consistently that i can open the firewall to? thanks.