3CX firewall

[KhaledQuenawy]

i install 3CX on debian and firewall Checker is Good >>. after 1 month i run firewall checker again and it always failed in some port ... i don't know is this right to run checker every month at least to be sure that every thing ok ... or as long as i make it once and it pass i should let it for ever and never try to check it again

 

[Lee Cramman]

You shouldn't have to keep running it unless something has changed or you're troubleshooting a problem.

That said, it sounds like something has changed... or you wouldn't be getting port failures.

 

[KhaledQuenawy]

You shouldn't have to keep running it unless something has changed or you're troubleshooting a problem.

That said, it sounds like something has changed... or you wouldn't be getting port failures.

if i format debian server and install new one and i have backup ... is this will restore all Ext and outbound rules and every thing or ??

 

[florink]

if i format debian server and install new one and i have backup ... is this will restore all Ext and outbound rules and every thing or ??

Well, that is the purpose of a backup isn't it

I just moved one of my clients to another server at another host. The whole process took 15 minutes. Of course everything was included in the backup. (if you want recordings, voicemail etc make sure you click this option when creating a backup).

 

[Lee Cramman]

if i format debian server and install new one and i have backup ... is this will restore all Ext and outbound rules and every thing or ??

Your problem is unlikely to be your install so I wouldn't blow it away and start again just yet but, yes, a restore from backup should include everything you need.

The correct way to troubleshoot would be to start looking at your firewall to make sure it's correctly configured.

It's also worth noting that, depending on your install and requirements, some ports don't need to be open.

Personally, if the PBX is working as expected I would leave it alone!

 

[leejor]

Which ports(s) are failing? Is there a pattern? Are you having issues...no audio?

 

[KhaledQuenawy]

Which ports(s) are failing? Is there a pattern? Are you having issues...no audio?

some ports may be 5 ports from 9000 to 10999 only ... if i let it ...will be problem

 

[KhaledQuenawy]

Which ports(s) are failing? Is there a pattern? Are you having issues...no audio?

should i turn off Debian Firewall (3CX Server)

 

[leejor]

You can try, for a short while, and see if it makes any difference. There may be another issue. Is it a different group of 5 sequential ports each time?

 

[KhaledQuenawy]

Now i power off all network devices for 20 Sec and turned them on and make firewall checker and its success ,,, but my question is if there is mismatch port in ports between 9000 - 10999 only several ports in this area .. .is there any problem ... i think these ports only used for call and if there is any mismatch 3CX can skip these ports .. i have 2000 ports ... with only 30 Ext so i never use all of them ... am i right ?? or not

 

[JohnS_3CX]

Hi @KhaledQuenawy,

The range 9000-10999 is the audio ports so if any of them don't allow calls to reach their correct destination you may have audio issues.

The ports increase automatically and go upwards so you might need to use those ports sooner or later, don't rely on the fact that there are only 30 extensions.This might affect lower ports too, not just the higher ones.

I speculate that one of your network elements (i.e a router/firewall/modem) can remap ports on the fly and unless you find which one is causing it you might have intermittent issues. This is usually a setting in your firewall's NAT policy and you might find it as Source Port Remap and disable it (depending on model). Best to reduce the variable as much as possible to ensure a stable service.