security

  1. Whitelisting IP Addresses

    Hello, We are receiving steady streams of authentication failures from IP addresses around the internet and as they emerge we tend to block the IP or the IP range to prevent them from trying to access the 3CX system again, version 15.5.5. As we are becoming more aggressive in blocking the...
  2. Password protected Outbound dialing or PIN for International dialing

    All the standard PBX(Avaya, Alcatel, Mitel, Cisco, Huawei etc.) has to option to enable International or National or specific outbound dialing rule using a PIN or Password. Unfortunately, 3CX doesn’t have this option. Currently, 3CX has the only option enable outbound call using PIN based on...
  3. Blacklist

    It would be nice to have the blacklists reported up to a central list so you could pick them up with a firewall list like DNSBL.
  4. Implemented Web Client Password Security

    Users with access to web client are allowed and should change their passwords. Those password are enforced to be at least 6 characters lenght without any further requirement. This are nowadays pretty weak passwords. Taking into account it is possible to initiate calls from web client this is a...
  5. TecMate

    How common are SIP attacks?

    Just wanted to get some of your opinions and experience. Our 3CX systems are blacklisting between 10 and 50 IP address a day due to "PBX: blocked for too many failed authentications" I've increased the blacklist time interval to 604800 seconds (1 week) to try and deter the attacks. I'm...
  6. Block access to provisioning url IP based (Linux)

    Hi, We have a hosted PBX that is been hacked, and apparently, someone found what is the provisioning URL and they are trying Mac Addresses until they get one served by the server. Last time we had this issue, we replaced the phone and this now happened again with a different device. Is there...
  7. 3CX phone client spam registration

    We are experiencing some fun spam here and I am not sure there is much we can do about it, but wanted to maybe make a suggestion or see if anyone else has come across this and found a way to deal with it. We have a client who had an employee with a 3CX mobile client installed on their cell...
  8. Jose Lara

    Improve Security Adding GEOIP Block or Accept

    implement the possibility of one being able to choose from which countries one will allow the PBX to accept connections. since in many cases we only need customers to access remotely from the same country where the PBX is installed. This also applies to the case of PBX installed in the Cloud...
  9. JCLloyd

    Solved { Solved} Looking For Security/Harding Guidelines: Remote Login Attempts

    Are there decent 3CX guidelines or online training related to how far I can go to harden the system? I want to block unwanted remote access attempts I am seeing on the system. I am trying NOT to lock it down to the point it is useless. I did find this interesting link, but it is very generic...