3CX Updates contacting China IP

[tech10]

Been having issues running updates on 3CX systems lately. Tried again on my own system a few minutes ago, and my Sonicwall logs show an blocked IP from China




I have geo-blocking enabled, and China (among other countries) blocked.

I'm not sure what to ask for, but the last think I want is to allow a Chinese IP address access to or from my, or my clients', 3CX systems.

Any suggestions?

 

[craigreilly]

Thats a Google Cloud IP Address in Asia.
Perhaps you can redirect outbound traffic to that IP to another Google IP?
...And just because its an Asia IP - doesn't mean the servers are there.

 

[tech10]

Thanks, Craig.

Aside from what you said - why would inability to get to a single IP completely block all updates? The system will not even see that updates are available unless connections are allowed to that IP.

 

[craigreilly]

What is your parameter for DOWNLOADS_URL set to?
(Settings -> Parameters)

 

[tech10]

https://downloads-us.3cx.com/downloads/v155

 

[cobaltit]

Change downloads-us to downloads-global

 

[tech10]

I changed downloads-us to downloads-global and got the same error with the same IP.

 

[cobaltit]

Well I guess you gotta do what you gotta do. Either let it through or don't get updates. Or find another CDN IP and force resolution to that.

 

[craigreilly]

Assuming it’s the closest available IP - and again - IP may have been bought from an Asian agency but be assigned to US servers.