Firewall check failes everytime, connection seems ok?

[J_Hermsen]

I've been trying the firewall check and it keeps failing.
If I do online portscans it shows the port is open.

Only stun servers are ok the others all show not reachable.
How to further diagnose this?
I can also receive calls so it just seems the firewall check is wrong somehow.
Tried using the app through 4G so it uses the tunnel whitch also failes in the firewall check.

How does this check verify the connectivity?

I'm using latest 3cx debian iso also made sure all updates are installed.

 

[YiannisH_3CX]

Hello @code6

The best way to troubleshoot this is by running wireshark side by side to the firewall checker and see where the issue is.
or more details please have a look at the following article

https://www.3cx.com/blog/docs/firewall-voip-rules-check/

 

[J_Hermsen]

Hello YiannisH

Haven't had much time to look into it.
Did a quick peek with wireshare/tshark, but didn't really notice anything in the caapture.

I did a windows install on the same system restored the config and ran the firewall check and there was only an error on the full cone test.
I had it running on port 5070 because I had another device on 5060, so just for kicks I changed it to 5060 and changed the other device to 5070 and all was green no full cone error.

So now the question remains, what's different in windows and linux what might fail the firewall check?
And why do I get the full cone error if I run on 5070?

For testing purpose I did update the iptables on linux to proper ports and also tried resetting/flushing all rules, but still not reachable according to firewall check.