3CX and Zadarma VoIP Provider

[voiper]

Dear Fellows,

3CX blocks by default user agent "sipsak" which is used by several providers, e.g. from the affordable and serious zadarma.com. Now I removed the blocking entry for "sipsak" in 'SEC_IGNORE_USER_AGENT' field in Settings->Advanced->custom parameters. So far so good, Zadarma is working now.

But I don't want to open a security hole and I'm asking myself how can I enable Zadarma without general removing the often malicious agent "sipsak" in 'SEC_IGNORE_USER_AGENT'. Is there another solution available?

Thanks for any hints.

Best regards

 

[craigreilly]

Do you have any users connecting remotely?
Are they all in offices or do you use iOS/Android softphone?

If you do not have users with iOS/Android or road warriors, you can open up 3cx communication only to the provider(and remote offices) on your firewall and block other inbound traffic. You can also add them to the whitelist for good measure in 3cx.

 

[voiper]

Hi Craig,

thanks for your response and useful hints.

Unfortunately there are road warriors and smartphone users connected to 3CX.

Is ist possible to add Zadarma to a whitelist and keep 'SEC_IGNORE_USER_AGENT' on default settings?

Best regards

 

[craigreilly]

Unfortunately, I do not know if SEC_IGNORE_USER_AGENT takes priority over the Whitelist or not.