3CX Required Ports

[danny_h]

Hello,

I am working on setting up 3CX server in Azure and I am using flowroute as my SIP trunk provider. This page lists various ports required for 3CX: https://www.3cx.com/docs/ports/

Can someone clarify if those ports need to be opened only between my server and SIP provider or should I also allow traffic from 3CX? I have added all the IP CIDR blocks flowroute specifies but firewall checker is still reporting failures:

testing port 5060... full cone test failed
testing port 5090... full cone test failed

If I need to allow traffic from 3CX does anyone know the IP ranges I should whitelist?

Update:

It looks like after I widely open port 5060 firewall passes so 3CX definitely pings it from its own servers. It would be great to know what IPs they are using to have them whitelisted.

 

[cobaltit]

3CX doesn't publish a list that I'm aware of. But if you are savvy enough (or paranoid enough) to restrict ranges, then you should also be able to see where it's trying to reach in your firewall logs and adjust accordingly. But more to the point if things work, it doesn't matter if the firewall test passes or not. That's why it's call the firewall test. If you just want the green check mark then remove your restrictions, run the test, and then put them back and then you have the green check mark and a more secure setup.