Firewall Check Fails

[deekay]

Hi,

3CX 18.0 Update 8 (Build 935) On Premises
Have an on-premises system (many years now) and just changed ISP, and provided with new router.

Noticed the Dashboard/Firewall sign is red so have run the Firewall Check The check fails with 'testing 3CX PhoneSystem Media Server... failed '
and all the following ports 9000-10998 fail with 'full cone test failed'

I've attached a pdf with port redirections and router details

Many thanks

Kevin

 

[Alejandro_3CX]

Hi @deekay the message Full Cone test Failed means that the ports are not open publicly or you are using any restriction such as Access List, Geo IP, etc…

The ports must be opened without any restrictions when performing the firewall test.

Also you may need to check this with your ISP in case they are blocking those ports if a non corporate internet service is in use.

For further information about the firewall checker please check this guide

 

[deekay]

Hi Alejandro_3CX, MANY thanks for your very quick reply. It is very much appreciated.

I will raise a question with my ISP about the ports when they reopen tomorrow.

Kind regards

Kevin

 

[Alejandro_3CX]

Hi Alejandro_3CX, MANY thanks for your very quick reply. It is very much appreciated.

I will raise a question with my ISP about the ports when they reopen tomorrow.

Kind regards

Kevin

You are welcome, have a great day!

 

[Cjay]

@deekay - At a quick glance it looks like you just have single port forward: 9000 forwarding to 10999. Shouldn't you have used the 'Port range forwarding' option to forward 9000~10999 [externa]l to 9000~10999 [internal] to 192.168.55.112?

 

[Alejandro_3CX]

@deekay - At a quick glance it looks like you just have single port forward: 9000 forwarding to 10999. Shouldn't you have used the 'Port range forwarding' option to forward 9000~10999 [externa]l to 9000~10999 [internal] to 192.168.55.112?

Exactly the range 9000~10999 UDP should be within the port range triggering