3CX tunnel failure following new IP Blacklist Entry

[motorbrain1]

I am having a problem where my PBX security appears to be compromised. I am using 3CX v 10, with dedicated bridges to remote offices and SIP Proxy Manager to connect another satellite office via the TCP-IP Tunnel. I have no problem getting the SIP Proxy Manager to connect and work, however it seems that following an new IP Blacklist entry The tunnel fails while the Bridges to other remote PBX's continue functioning. The only way I have found to recover is to restart the Tunnel Service on the Server PBX and restart the phones that use the remote SIP Proxy Manager. Upon restarting the Server Side TCP-IP Tunnel service the phones reconnect and stay reconnected until another IP blacklist entry is identified.

I am tired of chasing my tail on this and appreciate any help you may have to offer.

Thank you

 

[leejor]

I have no problem getting the SIP Proxy Manager to connect and work, however it seems that following an new IP Blacklist entry The tunnel fails while the Bridges to other remote PBX's continue functioning.

And the new IP Blacklist entry is in no way associated with the IP of a device attempting to use the Tunnel?

 

[motorbrain1]

That is exactly the case.

 

[leejor]

Does the IP change (is the set attempting to set-up the tunnel from various IPs), or, just a single one? If it is just one IP (the same one) that is blacklisted each time, you can go into the Blacklist and "allow" that one IP so that it will never be blacklisted. At one time I found that some internal sets were being blacklisted, for no apparent reason, and I had to allow the entire local LAN.

That doesn't solve the problem as to why this is happening in the first place. You may want to "adjust" the parameters that are used to determine if an IP should be blacklisted. By tweaking slightly, it may solve the issue for this set until you can figure out what is going on, which may require the use of a tool such as Wireshark, if the 3CX server logs (try using Verbose mode) don't provide any insight.