firewall check issue

[Afritech]

Hi, am facing an issue with the firewall check, I have already tried different method of configuration, even replacing another router, but am still having the same issue with firewall check, sometimes it indicate "failed" or also "port mapping doesn't match" vice versa. seriously, it became very frustrating. am about to loose my client if i did not resolve this issue. please help me to fix it, am using a mikrotik router and huawei b612-233, am trying to see which one will give me best result, but till now, nothing. Please help me.
my 3cx server is running on debian buster. I have also tried on windows, same issue.............it's very frustrating

 

[cobaltit]

There are guides for several firewalls including MikroTik available here:

https://www.3cx.com/docs/manual/firewall-router-configuration/

You didn't indicate which port(s) were failing but if it's the SIP port it usually means either SIP ALG isn't being disabled or sometimes if the internet provider is using a modem that has phone ports in it they often block the SIP port for their purposes, even when you aren't using them. The fix for this is to use a non-standard SIP port or, better yet, move to a hosted 3CX instance.

 

[Afritech]

thank you for your reply, I've already followed all of this guide, even changed the default 5060, 5090, but still get an error on this port while passing the firewall check, Sip alg is deactivated. am using a dynamic ip.

here is my Mikrotik firewall config




thanks,