3cx Web login using tcp port 5001

[joe3cx]

Should we open directly web login to administrator from Public internet to access direct 3cx system and when other tcp prot such as 3cx present using the same port. Does it possible if we block the access open from public and what will be the impact

 

[cobaltit]

If you want to access it from the public internet, yes. If you don't want it accessible from the public internet, then no. This is for you to decide.

 

[joe3cx]

i have try to blog 5001 port from public but my user which are connecting via mobile connect to 3cx won't work. My understanding SIP only work with TCP 5060 then why should open tcp port 5001 to public. This will become attention from hacker to break to web login easily and can remote control the 3cx.

 

[cobaltit]

https://www.3cx.com/docs/ports/

 

[Saqqara]

you need port 5001 for the following

1. to provision remote phones - sbc , stun
2. 3cx address book, 3cx presence

Just give you admin console password, a complicate password. incorrect entries three times, does blacklist the IP , which is released after a certain period

the default hacking settings within 3cx are petty good on blocking hacking attempts

 

[SteveITS]

Should we open directly web login to administrator from Public internet

The management web site and the web client use the same port. You can restrict access to the management site by Security/Security Settings/Console Restrictions. Check Allow Access from specific IP Addresses and ensure you add yours so you don't lock yourself out. Any not-allowed IP will still show the login page but you won't be able to log in even with a valid password.

 

[joe3cx]

will try on the option 3cx available. Thanks for sharing info