firewall

  1. STUN - Port Question

    Hi all, I have a quick question please, I have a number of locations with DECT devices and I am going to do all the Firewall rules required to make them work properly but I have forgotten if each DECT will need different ports or if using the same port would be fine as they are in different...
  2. TPR3CX

    Solved Incoming SMS/MMS messages not working on 3CX v18.x

    Greetings, We received reports of incoming SMS/MMS texting not work. Since we haven't deployed texting yet, we are not sure when the issue started. We can text out, but incoming does not work. When I do a TEST from the main Messaging section in the admin portal, I receive the following...
  3. Unsupported v18 3CX Linux - Host Firewall

    Has anyone installed the FortiClient host firewall on a v18 3CX / Linux ? Does anyone use host based firewalls on their installation? Thanks, Amir
  4. telforce

    Close port 22

    We install all 3CX systems with the Debian ISO on our own servers. By default port 22 is open for SSH. We would like to use another port for this. I know we can edit /etc/ssh/sshd_config for this. But how do i change the iptables configuration? I noticed there is a brute force protection so...
  5. Sophos XG - Firewall Test (Failing)

    Hi All, I wanted to put this to the community first before going to an actual support ticket. It was also tested with a Any to Any rule which still failed. Any ideas? Thanks Aaron
  6. Cisco Firepower 2110 Threat Defense Cofiguration

    Hello everyone, I’m trying to grant webclient access to the PBX from outside. Most of the information I'm getting to configure the firewall is related to Cisco ASA, but I'm dealing with a Cisco Firepower 2110 Threat Defense. I have run a firewall checker and I was able to resolve the SIP ALG...
  7. 3CX Debian - Linux Firewall

    Hi, To comply with security audits, I need to know, by default, does the Linux version of 3CX use IPTables? TIA, Amir
  8. Port 5060 - Open or not?

    Just looking for advice from the experts here on whether you generally recommend leaving port 5060 open or restricting access on your installs. I realize that use case would dictate whether they need to be open but looking for general advice on how others do it? Thx
  9. moved 3cx to cloud vm, sip phones won't stay registered?

    I've googled and keep finding info not quite related. We have a grandstream dect. It worked perfect when the server was inside our firewall. Now that it's outside, we have to restart the dect every morning to get calls on it. 3cx apps on our phones have even had this issue. I'm forgetting...
  10. 3CX with Third Party SBC

    Are there any resellers experienced with implementing AudioCodes or any other vendor SBC with 3CX? Currently - we are testing 3CX behind our firewall and to prevent the headaches of making SIP work thru the firewall - I'm recommending that we either move the 3CX onto a public address or we...
  11. Multi-Home 3CX VM

    I'd like to know, from 3CX support, if you will support a 3CX VM which is placed in a DMZ with multiple NICs? Is this a supported configuration OR does the 3CX VM have to be single homed in a LAN segment?
  12. Forbidden Calls

    Our system has been working fine for years but suddenly we have a very strange issue where for periods throughout the day all outgoing call attempts received the error: Call or Registration to <external no.>@(Ln.10001@Gamma) has failed. <Gamma IP> replied: 403 Forbidden-Source Endpoint Lookup...
  13. ochapple

    Solved Can't register a remote DECT Yealink W60B using SBC located inside the office LAN

    Hi everyone, I hope someone can help, I have looked at many different threads relating to W60B and SBC for registering remote phones and in particular the DECT Yealink W60B, but I've hit a brick wall and the thread info is not consistent with the 3CX documentation on the SBC setup at least Ports...
  14. Firewall check is failing

    Hello, We have a Sonicwall and I have configured it according to these guides: https://www.3cx.com/docs/manual/firewall-router-configuration/ https://www.3cx.com/docs/sonicwall-firewall-configuration/ However, when I run the firewall test the ports are being "remapped". I have verified that...
  15. Solved Windows Server 2019 Firewall Issues

    I'm running 3CX on a Windows Server 2019 machine and I think there are some weird issues going on with the port forwarding. All of the rules are defined in Windows Defender and the phones work from inside the building, but not from outside. As of today, they are no longer displaying the correct...
  16. IPhone using not stated Ports for audio

    Hello there, Is there anything known about Iphones using different audio ports than stated? We had the problem that Android Phones worked in "Network 1" WLAN perfeclty fine (3CX trunk in "Network 2"). However Iphones did not. Signalling was working and the Call could be established, but there...
  17. Lots of failed authentications - how can we avoid this ?

    Hi, On our 3cx cloud instance, we see many failed authentications (and then, blacklisted IPs). I think it would be safer to only authorize authentications coming from the 3CX tunnel and, for generic devices, from our public WAN IP address. On the virtual server's firewall, incoming traffic on...
  18. firewall configuration

    Hi, On our 3cx cloud instance, we see many failed authentications and blacklisted IPs. I think it would be safer to only authorize authentications coming from the 3CX tunnel and, for generic devices, from our public IP address. We already accept TCP 5060 and UDP 5060 from our public IP address...
  19. Firewall checker stalls after new firewall install

    We have just changed firewalls so wanted to make sure 3CX was working properly but when I try and run the firewall test it just stalls (has been running for like 20+ minutes with no progress). The detecting SIP ALG is reporting not detected but nothing else (ports 5060, 5090 or 9000+) have...
  20. v16 Firewall in Dashboard

    I haven't had time to run the firewall checker during business hours, yet, but I checked the port list and it still showed v14 and v15. Is there a different list for v16? It shows a red exclamation icon in my dashboard since upgrading from v15.5SP6 to v16 last night. So far things are fine...