3CX, Firewall and Thomson Speedtouch 585v7

[markparker]

Hello,

I was wondering if anyone could help me setup my 3cx. I have it working to a degree, however, it does not pass the firewall test.

My 3CX is setup on a machine on the nextwork with an IP of 192.168.1.200

The 585v7 has a rule for forwarding... set in game and application sharing... the rule is...

Protocol Port Range Translate To ... Trigger Protocol Trigger Port
TCP 5060 - 5060 5060 - 5060 - -
UDP 5060 - 5060 5060 - 5060 - -
TCP 5061 - 5061 5061 - 5061 - -
UDP 5061 - 5061 5061 - 5061 - -
TCP 3478 - 3478 3478 - 3478 - -
UDP 3478 - 3478 3478 - 3478 - -
TCP 9000 - 9015 9000 - 9015 - -
UDP 9000 - 9015 9000 - 9015 - -

I have telnetted to my router to add the following..
* To allow UDP hole punching:
----
connection bind application=CONE(UDP) port=0
saveall
----

Yet, I still get the firewall problems... listed below

----
Result: Firewall check failed! Hide details <<<

# Port Status Description Parameters
1 9000 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50083
2 9000 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50097
addrFromSTUN =
My.Ext.IP.Adrs:50083
3 9000 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
4 9000 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50083
5 9001 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50084
6 9001 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50098
addrFromSTUN =
My.Ext.IP.Adrs:50084
7 9001 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
8 9001 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50084
9 9002 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50085
10 9002 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50099
addrFromSTUN =
My.Ext.IP.Adrs:50085
11 9002 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
12 9002 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50085
13 9003 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50086
14 9003 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50100
addrFromSTUN =
My.Ext.IP.Adrs:50086
15 9003 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
16 9003 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50086
17 9004 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50087
18 9004 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50101
addrFromSTUN =
My.Ext.IP.Adrs:50087
19 9004 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
20 9004 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50087
21 9005 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50088
22 9005 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50102
addrFromSTUN =
My.Ext.IP.Adrs:50088
23 9005 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
24 9005 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50088
25 9006 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50089
26 9006 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50103
addrFromSTUN =
My.Ext.IP.Adrs:50089
27 9006 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
28 9006 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50089
29 9007 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50090
30 9007 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50104
addrFromSTUN =
My.Ext.IP.Adrs:50090
31 9007 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
32 9007 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50090
33 9008 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50091
34 9008 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50105
addrFromSTUN =
My.Ext.IP.Adrs:50091
35 9008 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
36 9008 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50091
37 9009 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50092
38 9009 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50106
addrFromSTUN =
My.Ext.IP.Adrs:50092
39 9009 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
40 9009 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50092
41 9010 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50093
42 9010 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50107
addrFromSTUN =
My.Ext.IP.Adrs:50093
43 9010 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
44 9010 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50093
45 9011 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50094
46 9011 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50108
addrFromSTUN =
My.Ext.IP.Adrs:50094
47 9011 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
48 9011 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50094
49 9012 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50095
50 9012 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50109
addrFromSTUN =
My.Ext.IP.Adrs:50095
51 9012 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
52 9012 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50095
53 9013 Error (4) The STUN server returned an ip which is not accessible from outside.
addrFromSTUN =
My.Ext.IP.Adrs:50096
54 9013 Error (6) An incompatible NAT configuration has been detected. Please check FAQ for further information.
addrFromAgent =
My.Ext.IP.Adrs:50110
addrFromSTUN =
My.Ext.IP.Adrs:50096
55 9013 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
56 9013 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:50096
57 9014 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
58 9014 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:49196
59 9015 Warning (8) Local port is not blocked from outside. STUN server has returned global port different from the local one, but the local port is also accessible from outside.
60 9015 Error (10) Port is open, but port number has been changed during NAT translation. THIS ERROR means you have Symmetric NAT and you do not have STATIC PORT MAPPINGS in place. 3CX Phone System will not communicated correctly with your VOIP provider or external extensions. See this FAQ: http://www.3cx.com/support/firewal-checker.html
externalAddress =
My.Ext.IP.Adrs:49197
----

Also, my server log is saying...

----
4:00:10.968 StunClient:nInitTests [CM506001]: STUN request to resolve SIP external IPort mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
13:40:10.796 StunClient:nInitTests [CM506001]: STUN request to resolve SIP external IPort mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
13:20:10.687 StunClient:nInitTests [CM506001]: STUN request to resolve SIP external IPort mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
13:00:10.468 StunClient:nInitTests [CM506001]: STUN request to resolve SIP external IPort mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
12:40:22.750 StunClient:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
12:40:19.656 StunClient:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
12:40:16.593 StunClient:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
12:40:13.531 StunClient:nTestTout [CM506004]: STUN request to STUN server 83.103.82.85:3478 has timed out; used Transport: 192.168.1.200:5060
12:40:10.406 StunClient:nInitTests [CM506001]: STUN request to resolve SIP external IPort mapping is sent to STUN server 75.101.138.128:3478 over Transport 192.168.1.200:5060
----

Can anyone help?

I thought that I had done everything right!

Mark

 

[amygoda]

Hello and welcome
close all firewalls
try dmz
try other stun server

 

[h2009]

You may have to buy a new router.
A client of mine had the same router, and after spending a while on it, it seemed that the port forwarding wasnt working on all the ports needed. It was just failing for no reason what so ever.

Save yourself some time and best order a new router.

 

[markparker]

There is a problem there! I am with BE Internet http://www.bethere.co.uk . And this is the router they supply you. I have an old Speedtouch 510.. v3 - but it doesn't do ADSL2!

There is a very detailed CLI. As I mentioned above - I have been told to allow UDP Hole Punching... this apparently makes the router do cone.

As in my above message - I have the ports set... my 3cx is on a machine on my network at 192.168.1.200 - and it works internally... calling extentions it seems to work.

The STUN is where the errors are - and - as I understand it this is used to find the external ip address.

Speedtouch 585v7 has a CLI - that you can telnet to.. however I have no idea what I am doing...

I just want the darn thing to pass the 3cx firewall test... and make sure that the stun server is working right.

I have a static IP assigned to my router/broadband connection. Does this help?

Can anyone help me out. I do want to use the 585 and 3CX. Mainly because with BE broadband is much faster that any repackaged BT IPSTREAM products!

Can anyone help me?

I can also post my user.ini file from the modem... would this help - anyone help me out?

Cheers

Mark

 

[HatchITMan]

I also am with BE, and have been struggling with a Speedtouch 780 for a long while. I have now decided to switch to a Netgear router, for which there is a lot of information at http://www.beforum.co.uk/forumdisplay.php?f=51

I haven't yet taken the plunge, as I need a time when the office is quiet, such as a weekend, so that I don't disrupt the whole IT system!