Allow SIP traffic only from SIP provider

[Gabriele Ghesla]

I was going to allow SIP ports only from my SIP provider in order to improve security but I remembered that all the 3CX ports has to be opened to the 3CX server in order to make the firewall check work.

Does anyone know the public IP of the 3CX server in order to make that security improvement work?

 

[AWS2P]

don't care about firewall checker , pass it before restricting 5060 to public IP from your sip provider, if all is ok it will be green , then change firewall rules and set with your sip provider ip.
the only think now if you play once more firewall checker it will be red, in worst case for 3CX support remove restrictions on your rule , done.

 

[Gabriele Ghesla]

Thank you for the quick reply.

Have you already tried this configuration enabling SIP traffic just from your provider?

 

[Alphabetic]

Thank you for the quick reply.

Have you already tried this configuration enabling SIP traffic just from your provider?

I do this all the time.

You'll know if you've done it wrong if you cannot receive calls once you've locked it down.