Console restrictions: Remove default entries

[njitss]

Hi There,

We have setup 3CX V20 in our office, and it is located behind a reverse proxy (HAproxy) because we share one external IP address.
I'd like to remove the default console restrictions allowlist in the 3CX admin panel to only allow a certain subnet of our private IP address space. The internal IP address of the reverse proxy should not be able to login to the admin portal of 3CX.
How can we remove these default entries?

Best regards,

 

[bitn2]

You cant, internal networks are always allowed. Why you want to use an reverse proxy for your pbx? You can use any port for your pbx https.

 

[njitss]

Hi Bitn2, thanks for your reply.
We like to keep HTTPS on the standard 443 port, as many firewalls do not allow traffic on non-standard ports.

 

[bitn2]

Hi Bitn2, thanks for your reply.
We like to keep HTTPS on the standard 443 port, as many firewalls do not allow traffic on non-standard ports.

I understand... To use 3cx with proxy isnt an supported scenario but it could work. There are some threads regarding this thema. Anyway, you cant block internal networks.

 

[njitss]

Hi Bitn2,

Thanks for the reply. Hopefully the 3CX developers pick this up as a (security-) feature request.

 

[bitn2]

I am sure they wont, its not the intended way to use 3cx.

 

[NicholasP_3CX]

Hi Bitn2,

Thanks for the reply. Hopefully the 3CX developers pick this up as a (security-) feature request.

You will always be able to connect to the PBX from within the network. This isn't going to change any time soon.

Alot of people manage to get themselves locked out of a PBX from an external IP address. Imagine what would happen if we allowed people to remove the local addresses from being allowed to connect.