Firewall 3CX PhoneSystem Media Server failed

[boggio_95]

Hi everyone, i recently changed my 3cx server machine and restored 3cx from backup.
No changes made to network infrastructure.
Router: FritzBox 7590 with server ip exposed host enabled
Firewall: Windows Firewall with all inbound roules for 3cx setted.

I have one way audio on outbound and inbound sip providers calls. Everything is ok for internal calls.

This is the 3cx firewall test result:

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX PhoneSystem 01 SIP Server... done
  • stopping service... done
  • detecting SIP ALG... not detected
  • testing port 5060... done
  • starting service... done
• testing 3CX PhoneSystem Media Server... failed (How to resolve?)
  • stopping service... done
  • testing port 5090... done
  • testing ports [9000..9398]... failed (How to resolve?)
    • testing port 9000... not reachable (How to resolve?)
    • testing port 9002... not reachable (How to resolve?)
    • testing port 9004... not reachable (How to resolve?)
    • ... ... .. [shortened but same for each port]
    • testing port 9398... not reachable (How to resolve?)
  • testing ports [10600..10998]... failed (How to resolve?)
    • testing port 10600... not reachable (How to resolve?)
    • testing port 10602... not reachable (How to resolve?)
    • ... ... .. [shortened but same for each port]
    • 
      
    • testing port 10998... not reachable (How to resolve?)
  • starting service... done

Does anyone have an idea of what is going on?

Thanks in advance for any help.

 

[SweetAction]

Is your RTP range (9000-10999 UDP) port forwarding properly set? Is SIP ALG happening on that port range?

 

[boggio_95]

Is your RTP range (9000-10999 UDP) port forwarding properly set? Is SIP ALG happening on that port range?

This is my router port forwarding configuration for the RTP ports (all UDP):


This is the windows firewall configuration:


I think everything is ok here.

 

[SweetAction]

According to the firewall tester, something is blocking 3CX from reaching those posts.

My next steps would be a wireshark to see what's happening.