3CX PBX auto add rule to Open Port 5060,5090 on IPTable after reboot server

[anhtrong]

Hi, I have facing this issue from 3CX v 15.5 on Debian 9.4
As we have config to only open port 5060,5090 on IPTable to some specific trust source IP only. But after save IPTable file and reboot server, seem 3CX PBX auto add rule to Open Port 5060,5090 to ALL on IPTable

As 2 this line:
-A INPUT -p tcp -m multiport --dports 5000,5001,5060,5061,5090 -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p udp -m multiport --dports 5060,5090 -j ACCEPT

Is there any way to disable this on 3CX or Debian. Because we don't need to pubic 5060 port to all.

Thanks you!!!

 

[eddv123]

Is this system public facing ? IE: public IP address on the 3CX directly without local firewall?

This is the only example I can think of why this would concern you. Personally I would always use a local FW.

Have you seen this guide, it will at least tell you how to adjust these settings: https://www.3cx.com/docs/manual/firewall-router-configuration/

 

[YiannisH_3CX]

Hello @anhtrong

I am thinking that you are not making the changes persistent so every time the services restart the OS is applying the rules that are saved in the IP tables file. You should write your changes to the filw to avoid this from happening.