3CX system Public IP being Blacklisted by 3CX

Discussion in '3CX Phone System - General' started by redmondsau, Oct 22, 2015.

Thread Status:
Not open for further replies.
  1. redmondsau

    Joined:
    Oct 24, 2012
    Messages:
    6
    Likes Received:
    0
    I have recently started getting email notifications that an IP has been blacklisted due to too many failed authentications.

    The IP in question is the Public IP address of the router in front of the 3CX system.

    Any ideas on why this may be happening & how to resolve it.

    Regards
    redmondsau
     
  2. erling

    Joined:
    Mar 26, 2010
    Messages:
    18
    Likes Received:
    0
    Don't know why it does it, but you can fix it by editing the entry in the IP Blacklist and change the "action" from deny to allow.
     
  3. lneblett

    lneblett Well-Known Member

    Joined:
    Sep 7, 2010
    Messages:
    2,083
    Likes Received:
    61
    Before you white list the IP, consider that it could be a spoofed IP. You need to consider a few things -

    1. Do you have any devices or softphones on the public side of the router? If so, is it possible that one of these devices is causing the issue.

    2. What harm has come about as a result of the blacklisting? Has any functionality of the system been impacted? If no, then consider simply extending the blacklisting period so as to avoid the emails.

    3. Unless you know and feel comfortable about the situation, why take the chance?

    There are plenty of folks out there that do nothing (it seems) other than to find ips and scan ports in the hopes that they will get a response and once found, will try various things to see if they can exploit it.
     
Thread Status:
Not open for further replies.