External IPs to be allowed through firewall

[LWP]

Hi Guys
Do I need to allow the traffic from any other ips than my voip provider? When I lock the policy down to my provider's ip the firewall check fails on "testing 3CX SIP Server" with "full cone test failed", when I allow all sources on the firewall the test passes. Calls are working regardless.
I have looked at documentation but can't find the answer.
thanks

 

[eagle2]

If you don't use external extensions (or VoIP providers), you don't need to allow new traffic through your inbound connections firewall.

 

[LWP]

the mentioned "provider" in my post is a Voip provider. When I only allow their ip firewall check fails.

 

[GiannosC_3CX]

Hi LWP,

Do I need to allow the traffic from any other ips than my voip provider?

Please note some providers send the RTP through differed servers, so if you allow only your provider, also you need to allow all the RTP servers used by your provider.
May I refer on this link https://www.3cx.com/blog/voip-howto/static-port-mappings/ you can find all the relevant details why "full cone test failed".

 

[craigreilly]

and firewall test will fail - as you are not allowing traffic from the testing servers.