Firewall checker---- should be same old question

Discussion in '3CX Phone System - General' started by remy2vad, Dec 19, 2012.

Thread Status:
Not open for further replies.
  1. remy2vad

    Joined:
    Dec 19, 2012
    Messages:
    6
    Likes Received:
    0
    Hi,

    It is my first try of 3CX.....
    I have configured two extensions both inside the lan , one of them is then brought outside the lan ( to another segment).
    Both can register from inside and outside , I can make the call from inside to outside. But from outside to inside I have the caller not recognized message and on the 3cx softphone outside , I got the Forbiden message.
    No Voip provider it is a 2 ISPs config, one softphone behind one ISP router and the 3CX system behind the other one.
    I have my NAT/Firewall router in front of 3cx configured properly as mentioned in the documentation.
    When I perform the firewall check all the tests are red.... but with my wireshark I see that all ports are correctly sent and received without alteration to the stun server. So why this test is not successful ?
    BTW any idea about the call config problem outside to inside ( I guess that invite message from outside to inside is from the extesnion@public ip of the 3CX and the station is at extension@public ip of the remote extension ( as shown in the phone status) and so it is not recognized but ...... step by step 8)

    Thanks for any help there
     
  2. SY

    SY Well-Known Member
    3CX Support

    Joined:
    Jan 26, 2007
    Messages:
    1,825
    Likes Received:
    2
    http://www.3cx.com/forums/forum-rules-read-to-get-answers-93.html
    http://www.3cx.com/blog/docs/echo-test/
    http://www.3cx.com/blog/docs/3cx-server-activity-log/
    http://www.3cx.com/blog/docs/firewall-checker/
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. mixig

    mixig Active Member

    Joined:
    Dec 13, 2011
    Messages:
    524
    Likes Received:
    12
    First of all i would check firewall/Nat configuration again (all red :S, that cannot be good at all ), also if your outside extension is behind the NAT there can be problem with one way audio so check this article: (but after you resolve the issue with firewall/NAT):
    http://www.3cx.com/blog/voip-howto/remote-extensions/

    Also check the server activity log in 3cx and wireshark log for that "Forbidden"...
     
  4. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,878
    Likes Received:
    307
    Be sure that in the 3CX extension options ( the extension number that you are using outside), that you have the option checked to allow registration from outside the local LAN. Be sure that the public IP, of the remote set, doesn't end up in the PBX's IP Blacklist from too many failed registration attempts.
     
  5. remy2vad

    Joined:
    Dec 19, 2012
    Messages:
    6
    Likes Received:
    0
    thanks a lot great community.....

    As I mentioned I have no registration problem , the main issue so far is why in wireshark I see that the ports are well send and received and correctly forwarded in real NAT term, but 3CX firewall checker results does not show any of the test result as successful!!!!!
    Let's deal with this first
    Tx
     
  6. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    10,878
    Likes Received:
    307
    What make/model router, is 3CX behind? There may be some settings that need to be changed.
     
Thread Status:
Not open for further replies.