Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

3CX, Firewall and Thomson Speedtouch 585v7

Discussion in '3CX Phone System - General' started by markparker, Sep 13, 2008.

Thread Status:
Not open for further replies.
  1. markparker

    Joined:
    Sep 13, 2008
    Messages:
    8
    Likes Received:
    0
    Hello,

    I was wondering if anyone could help me setup my 3cx. I have it working to a degree, however, it does not pass the firewall test.

    My 3CX is setup on a machine on the nextwork with an IP of 192.168.1.200

    The 585v7 has a rule for forwarding... set in game and application sharing... the rule is...

    Protocol Port Range Translate To ... Trigger Protocol Trigger Port
    TCP 5060 - 5060 5060 - 5060 - -
    UDP 5060 - 5060 5060 - 5060 - -
    TCP 5061 - 5061 5061 - 5061 - -
    UDP 5061 - 5061 5061 - 5061 - -
    TCP 3478 - 3478 3478 - 3478 - -
    UDP 3478 - 3478 3478 - 3478 - -
    TCP 9000 - 9015 9000 - 9015 - -
    UDP 9000 - 9015 9000 - 9015 - -

    I have telnetted to my router to add the following..
    * To allow UDP hole punching:
    ----
    connection bind application=CONE(UDP) port=0
    saveall
    ----

    Yet, I still get the firewall problems... listed below

    ----
    Result: Firewall check failed! Hide details <<<

    # Port Status Description Parameters
    1 9000 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50083
    2 9000 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50097
    addrFromSTUN =
    My.Ext.IP.Adrs:50083
    3 9000 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    4 9000 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50083
    5 9001 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50084
    6 9001 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50098
    addrFromSTUN =
    My.Ext.IP.Adrs:50084
    7 9001 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    8 9001 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50084
    9 9002 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50085
    10 9002 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50099
    addrFromSTUN =
    My.Ext.IP.Adrs:50085
    11 9002 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    12 9002 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50085
    13 9003 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50086
    14 9003 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50100
    addrFromSTUN =
    My.Ext.IP.Adrs:50086
    15 9003 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    16 9003 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50086
    17 9004 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50087
    18 9004 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50101
    addrFromSTUN =
    My.Ext.IP.Adrs:50087
    19 9004 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    20 9004 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50087
    21 9005 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50088
    22 9005 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50102
    addrFromSTUN =
    My.Ext.IP.Adrs:50088
    23 9005 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    24 9005 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50088
    25 9006 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50089
    26 9006 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50103
    addrFromSTUN =
    My.Ext.IP.Adrs:50089
    27 9006 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    28 9006 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50089
    29 9007 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50090
    30 9007 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50104
    addrFromSTUN =
    My.Ext.IP.Adrs:50090
    31 9007 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    32 9007 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50090
    33 9008 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50091
    34 9008 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50105
    addrFromSTUN =
    My.Ext.IP.Adrs:50091
    35 9008 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    36 9008 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50091
    37 9009 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50092
    38 9009 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50106
    addrFromSTUN =
    My.Ext.IP.Adrs:50092
    39 9009 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    40 9009 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50092
    41 9010 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50093
    42 9010 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50107
    addrFromSTUN =
    My.Ext.IP.Adrs:50093
    43 9010 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    44 9010 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50093
    45 9011 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50094
    46 9011 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50108
    addrFromSTUN =
    My.Ext.IP.Adrs:50094
    47 9011 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    48 9011 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50094
    49 9012 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50095
    50 9012 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50109
    addrFromSTUN =
    My.Ext.IP.Adrs:50095
    51 9012 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    52 9012 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50095
    53 9013 Error (4) The STUN server returned an ip which is not accessible from outside.
    addrFromSTUN =
    My.Ext.IP.Adrs:50096
    54 9013 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
    addrFromAgent =
    My.Ext.IP.Adrs:50110
    addrFromSTUN =
    My.Ext.IP.Adrs:50096
    55 9013 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    56 9013 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:50096
    57 9014 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    58 9014 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:49196
    59 9015 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
    60 9015 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
    externalAddress =
    My.Ext.IP.Adrs:49197
    ----

    Also, my server log is saying...

    ----
    4:00:10.968 StunClient::eek:nInitTests [CM506001]: STUN request to resolve SIP external IP:port mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
    13:40:10.796 StunClient::eek:nInitTests [CM506001]: STUN request to resolve SIP external IP:port mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
    13:20:10.687 StunClient::eek:nInitTests [CM506001]: STUN request to resolve SIP external IP:port mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
    13:00:10.468 StunClient::eek:nInitTests [CM506001]: STUN request to resolve SIP external IP:port mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
    12:40:22.750 StunClient::eek:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
    12:40:19.656 StunClient::eek:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
    12:40:16.593 StunClient::eek:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
    12:40:13.531 StunClient::eek:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
    12:40:10.406 StunClient::eek:nInitTests [CM506001]: STUN request to resolve SIP external IP:port mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
    ----

    Can anyone help?

    I thought that I had done everything right!

    Mark
     
  2. amygoda

    amygoda Member

    Joined:
    Sep 18, 2006
    Messages:
    436
    Likes Received:
    0
    Hello and welcome
    close all firewalls
    try dmz
    try other stun server
     
  3. h2009

    h2009 Member

    Joined:
    Mar 15, 2008
    Messages:
    447
    Likes Received:
    0
    You may have to buy a new router.
    A client of mine had the same router, and after spending a while on it, it seemed that the port forwarding wasnt working on all the ports needed. It was just failing for no reason what so ever.

    Save yourself some time and best order a new router.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. markparker

    Joined:
    Sep 13, 2008
    Messages:
    8
    Likes Received:
    0
    There is a problem there! I am with BE Internet http://www.bethere.co.uk . And this is the router they supply you. I have an old Speedtouch 510.. v3 - but it doesn't do ADSL2!

    There is a very detailed CLI. As I mentioned above - I have been told to allow UDP Hole Punching... this apparently makes the router do cone.

    As in my above message - I have the ports set... my 3cx is on a machine on my network at 192.168.1.200 - and it works internally... calling extentions it seems to work.

    The STUN is where the errors are - and - as I understand it this is used to find the external ip address.

    Speedtouch 585v7 has a CLI - that you can telnet to.. however I have no idea what I am doing...

    I just want the darn thing to pass the 3cx firewall test... and make sure that the stun server is working right.

    I have a static IP assigned to my router/broadband connection. Does this help?

    Can anyone help me out. I do want to use the 585 and 3CX. Mainly because with BE broadband is much faster that any repackaged BT IPSTREAM products!

    Can anyone help me?

    I can also post my user.ini file from the modem... would this help - anyone help me out?

    Cheers

    Mark
     
  5. HatchITMan

    Joined:
    Dec 18, 2007
    Messages:
    18
    Likes Received:
    0
    I also am with BE, and have been struggling with a Speedtouch 780 for a long while. I have now decided to switch to a Netgear router, for which there is a lot of information at http://www.beforum.co.uk/forumdisplay.php?f=51

    I haven't yet taken the plunge, as I need a time when the office is quiet, such as a weekend, so that I don't disrupt the whole IT system!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Thread Status:
Not open for further replies.