Firewall checker---- should be same old question

[remy2vad]

Hi,

It is my first try of 3CX.....
I have configured two extensions both inside the lan , one of them is then brought outside the lan ( to another segment).
Both can register from inside and outside , I can make the call from inside to outside. But from outside to inside I have the caller not recognized message and on the 3cx softphone outside , I got the Forbiden message.
No Voip provider it is a 2 ISPs config, one softphone behind one ISP router and the 3CX system behind the other one.
I have my NAT/Firewall router in front of 3cx configured properly as mentioned in the documentation.
When I perform the firewall check all the tests are red.... but with my wireshark I see that all ports are correctly sent and received without alteration to the stun server. So why this test is not successful ?
BTW any idea about the call config problem outside to inside ( I guess that invite message from outside to inside is from the extesnion@public ip of the 3CX and the station is at extension@public ip of the remote extension ( as shown in the phone status) and so it is not recognized but ...... step by step 8)

Thanks for any help there

 

[SY]

http://www.3cx.com/forums/forum-rules-read-to-get-answers-93.html
http://www.3cx.com/blog/docs/echo-test/
http://www.3cx.com/blog/docs/3cx-server-activity-log/
http://www.3cx.com/blog/docs/firewall-checker/

 

[mixig]

First of all i would check firewall/Nat configuration again (all red :S, that cannot be good at all ), also if your outside extension is behind the NAT there can be problem with one way audio so check this article: (but after you resolve the issue with firewall/NAT):
http://www.3cx.com/blog/voip-howto/remote-extensions/

Also check the server activity log in 3cx and wireshark log for that "Forbidden"...

 

[leejor]

But from outside to inside I have the caller not recognized message and on the 3cx softphone outside , I got the Forbiden message.

Be sure that in the 3CX extension options ( the extension number that you are using outside), that you have the option checked to allow registration from outside the local LAN. Be sure that the public IP, of the remote set, doesn't end up in the PBX's IP Blacklist from too many failed registration attempts.

 

[remy2vad]

thanks a lot great community.....

As I mentioned I have no registration problem , the main issue so far is why in wireshark I see that the ports are well send and received and correctly forwarded in real NAT term, but 3CX firewall checker results does not show any of the test result as successful!!!!!
Let's deal with this first
Tx

 

[leejor]

What make/model router, is 3CX behind? There may be some settings that need to be changed.