can't access 3cx server from WAN

[rubennazarian]

Hello,
I have set up my 3cx server on a windows machine.
I am only able to access the server from LAN
I can't use public IP or FQDN
I'm running it behind a Mikrotik router. when I run the firewall test everything checks off.
what should I do ?

 

[slowsquirrel]

How are you trying to access the 3CX server from your WAN, such as via web management or trying to connect a phone?

 

[JohnS_3CX]

Hi,

Depending on how you setup the ports, if you left the defaults then you should be able to access it via IP like so: https://xxx.xxx.xxx.xxx:5001 where xxx.xxx.xxx.xxx is the public IP that you see on your dashboard.

Does this work for you? Note that the firewall checker does not test the https port so it can pass the tests normally, but unless you also forwarded the https port in your firewall you will not be able to access the pbx externally because the request to connect won't reach the PBX. https://www.3cx.com/docs/ports/

Also can you tell us what version of Windows you installed on? https://www.3cx.com/docs/manual/

 

[rubennazarian]

How are you trying to access the 3CX server from your WAN, such as via web management or trying to connect a phone?

I tried both it doesn't work. I'm using port 433

 

[rubennazarian]

Hi,

Depending on how you setup the ports, if you left the defaults then you should be able to access it via IP like so: https://xxx.xxx.xxx.xxx:5001 where xxx.xxx.xxx.xxx is the public IP that you see on your dashboard.

Does this work for you? Note that the firewall checker does not test the https port so it can pass the tests normally, but unless you also forwarded the https port in your firewall you will not be able to access the pbx externally because the request to connect won't reach the PBX. https://www.3cx.com/docs/ports/

Also can you tell us what version of Windows you installed on? https://www.3cx.com/docs/manual/

I'm using port 433
and I have forwarded all the ports on that list to 3cx server
Is there any way that I would be able to check the ports on 3cx server?

 

[rubennazarian]

Hi,

Depending on how you setup the ports, if you left the defaults then you should be able to access it via IP like so: https://xxx.xxx.xxx.xxx:5001 where xxx.xxx.xxx.xxx is the public IP that you see on your dashboard.

Does this work for you? Note that the firewall checker does not test the https port so it can pass the tests normally, but unless you also forwarded the https port in your firewall you will not be able to access the pbx externally because the request to connect won't reach the PBX. https://www.3cx.com/docs/ports/

Also can you tell us what version of Windows you installed on? https://www.3cx.com/docs/manual/

windows 10pro

 

[JohnS_3CX]

if you try the internal LAN IP along with the port you are using and the management console loads, then your ports work until the PBX server.

The issue is most likely after the PBX server, I suspect on the firewall (of Windows or MicroTik).


What error does the browser give when you try to connect externally?

 

[rubennazarian]

if you try the internal LAN IP along with the port you are using and the management console loads, then your ports work until the PBX server.

The issue is most likely after the PBX server, I suspect on the firewall (of Windows or MicroTik).


What error does the browser give when you try to connect externally?

This site can’t be reached
xx.xx.xxx.xx refused to connect.

Try:

• Checking the connection
• Checking the proxy and the firewall

ERR_CONNECTION_REFUSED

 

[JohnS_3CX]

Looks like firewall ports are actually closed

 

[Cytranic]

Sounds like a loopback issue. Try to access it on your mobile device using cellular connection.

 

[Saqqara]

Check that no other service is using port 443 on the same wan IP address .i.e. management of the router.

Check that the port is open using one of the many open port testers on the web.

 

[complex1]

Try if you can access the PBX with its local IP address: http://<LAN IP-add>:5000

Is in the MikroTik the "HairPin NAT" rule setup correctly?

 

[Lee Cramman]

I would try mapping a port other than 443 on the WAN side to port 443 on the LAN side as a test.

If that works the problem is with your router config (config or maybe routers https remote management is switched on?). If it doesn't then the problem is likely with the firewall on the server.

 

[rubennazarian]

Check that no other service is using port 443 on the same wan IP address .i.e. management of the router.

Check that the port is open using one of the many open port testers on the web.

the port is open

 

[rubennazarian]

I would try mapping a port other than 443 on the WAN side to port 443 on the LAN side as a test.

If that works the problem is with your router config (config or maybe routers https remote management is switched on?). If it doesn't then the problem is likely with the firewall on the server.

the port is working fine

 

[cobaltit]

Try if you can access the PBX with its local IP address: http://<LAN IP-add>:5000

If using 443 for the secure then most likely the http port would be 80 not 5000

 

[rubennazarian]

If using 443 for the secure then most likely the http port would be 80 not 5000

its 5000

 

[rubennazarian]

Also, I'm able to make calls and everything
I just can't access the server from WAN

 

[AWS2P]

if you ping FQDN from wan do you have an answer from your public IP ?

On 3CX side , from a CMD windows, run a netstat -a -f -q

 

[rubennazarian]

if you ping FQDN from wan do you have an answer from your public IP ?

On 3CX side , from a CMD windows, run a netstat -a -f -q

yes I have ping
what should I look for in netstat -a -f -q ?