Cannot Pass Firewall Check

[Cello]

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... don
• testing 3CX SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... failed (How to resolve?)
  • testing port 5060... not reachable (How to resolve?)
  • starting service... done

--
Microsoft Windows [Version 10.0.14393]
(c) 2016 Microsoft Corporation. All rights reserved.

C:\Users\Demser>netstat -ano | findstr /I /C:"PID" /C:":5060"
Proto Local Address Foreign Address State PID
TCP 0.0.0.0:5060 0.0.0.0:0 LISTENING 7412
UDP 0.0.0.0:5060 *:* 7412

C:\Users\Demser>tasklist /fi "pid eq 7412"

Image Name PID Session Name Session# Mem Usage
========================= ======== ================ =========== ============
3CXPhoneSystem.exe 7412 Services 0 13,216 K





1 - I use Huawei Home Gateway HG255s

• SIP ALG is disable
  

2 - Gateway is Audiocodes MP-118 FXO


3 - 3cx pbx is online and I can use inside of network. (extansions can make a call with each other)

4- But when the call from outside cannot forward to extansion. I think it's related with firewall setting,

Anybody could you help me,

regards

 

[leejor]

Here is a list of al ports used by 3CX.

https://www.3cx.com/docs/3cx-phone-system-v14-ports/

It would appear that you may not have all forwarded in your router.

 

[Cello]

Thx a lot, but all ports forwarded to 3cx,

 

[leejor]

From what I could find, it would appear that that router also hosts two VoIP ATAs. If that is the case then port 5060 ,and I assume, 5061(and perhaps some others) are probably routing to the ATAs. There may be a way to disable this unless the device was supplied by your ISP, in which case it could be locked down. This manual doesn't say anything about configuring the ATAs.
http://www.starhub.com/content/dam/...upport-broadband-huawei-hg256s-quickstart.pdf

 

[cobaltit]

Well the Huawei gateway shouldn't matter if calls are coming in via the Audiocodes FXO gateway... So the fact that the firewall check doesn't pass is not the problem. When you say can't forward to an extension do you mean when you answer the call you can't forward it or do you mean you can't route it to the extension (have the external call ring to a particular extension)?

 

[leejor]

What does he 3CX Activity Log show for an incoming call attempt?

 

[Cello]

Actually I can't route it to the extension and Activity log is empty, only I see internal call logs (extension to extension)

 

[leejor]

If the log is empty, then the gateway is not sending the call attempt out at all, or is sending it to an incorrect IP or port. Does the gateway have a syslog to show internal activity upon receipt of a call? Is the gateway registering correctly?