Firewall check ports remail closed for almost all port - on premise debian 9

[ECOM GROUP (Mauritius)]

Hello, I am testing 3cx pro on debian 9 installed on a mini pc. Firewall check for port 9000 - 10998 appeared red and showing port mapping is xxx .

3CX sip server failed. is there anyone can help?

I am using a Fiber internet connection , huawer router HG8245H , i tried to open port and still same. i have disabled SIP ALG and this is ok, but other port issue remain.

Thanks

 

[diamond9]

Hi, im not familiar with that router but i have read somewhere under the WAN tab there is a option for Full Cone Nat, you need to enable this. Can you take a look and see if that is there?

Regards

 

[ECOM GROUP (Mauritius)]

Hi, im not familiar with that router but i have read somewhere under the WAN tab there is a option for Full Cone Nat, you need to enable this. Can you take a look and see if that is there?

Regards

Thanks for your response, it is already on full cone nat

 

[diamond9]

Can you send a screen shot of your current port forwarding rules?

Regards

 

[ECOM GROUP (Mauritius)]

This look weird now, before i open port for 9000-10999, it was showing green in firewall checker.. now only port 5060, 5090 and 9000 as per 3cx firewall checker.. any idea?

 

[diamond9]

That is strange now, the article i am reading the screens are slightly different, is there any firmware availble for the router, here is what i am seeing



The looks like outbound is changing the source port before it gets to the stun servers

 

[ECOM GROUP (Mauritius)]

That is strange now, the article i am reading the screens are slightly different, is there any firmware availble for the router, here is what i am seeing

View attachment 13849

The looks like outbound is changing the source port before it gets to the stun servers

It was like this before, then my ISP have upgraded the firmware. it still forward port same as below.

 

[cobaltit]

It looks like that router has telephone ports. Pretty much all routers that have VoIP built-in can't be used because they reserver the VoIP ports for their own use.

 

[diamond9]

Well that reply by @cobaltit just made my next suggestion alot easier, get a router that is more programmable rather than a ISP supplied router, they always have some sort of quirk that stops something from working

 

[ECOM GROUP (Mauritius)]

Well that reply by @cobaltit just made my next suggestion alot easier, get a router that is more programmable rather than a ISP supplied router, they always have some sort of quirk that stops something from working

It looks like that router has telephone ports. Pretty much all routers that have VoIP built-in can't be used because they reserver the VoIP ports for their own use.

it seem to be an issue, but i have also tried using a TP Link Router Archer C50 AC1200, still same issue. Do you guys think i need to open port on debian 9 also?

 

[diamond9]

did you use the 3cx image or just install debian then 3cx? I am not a linux expert at all, here is the article from 3cx about iptables
https://www.3cx.com/docs/manual/firewall-router-configuration/
Maybe can point you in the right direction

 

[ECOM GROUP (Mauritius)]

did you use the 3cx image or just install debian then 3cx? I am not a linux expert at all, here is the article from 3cx about iptables
https://www.3cx.com/docs/manual/firewall-router-configuration/
Maybe can point you in the right direction

i have installed full debian 9 first graphic version, then 3CX

 

[complex1]

If you didn't install the 3CX iso, then check/add/change your iptables.

 

[ECOM GROUP (Mauritius)]

If you didn't install the 3CX iso, then check/add/change your iptables.

Thanks, i don't know debian linux much, i think i am gonna uninstall debian and re install by using 3cx iso which include debian

 

[diamond9]

That would have been my next suggestion, let us know how it goes.

 

[ECOM GROUP (Mauritius)]

That would have been my next suggestion, let us know how it goes.

Yes trying it,

 

[ECOM GROUP (Mauritius)]

That would have been my next suggestion, let us know how it goes.

I just reinstalled all via 3CX Debian ISO, the port issue is still here.

 

[diamond9]

And you say this issue is still there through other routers? what type of internet connection do you have?

 

[ECOM GROUP (Mauritius)]

And you say this issue is still there through other routers? what type of internet connection do you have?

I have FTTH , fiber broadband & voice

 

[ECOM GROUP (Mauritius)]

It looks like that router has telephone ports. Pretty much all routers that have VoIP built-in can't be used because they reserver the VoIP ports for their own use.

And you say this issue is still there through other routers? what type of internet connection do you have?

i am thinking of a solution, is to reinstall 3cx and change the port 5060 to 8060, and 5090 to 8090.
for SIP AUDIO PORT instead of 9000-10998 , what else i can use? and how to change this?