Firewall configuration to allow SMS

[Alayyoubi]

Hi,

I have configured 3CX with Flowroute to send/receive SMS & MMS messages, and have allowed access to port 5001 on the firewall to allow traffic, when the policy is set to accept traffic from all sources bi-directional SMS/MMS works fine but when I lock it down to 3CX's Messaging server (messaging.3cx.com) it doesn't work. I'm unsure which servers are need to be allowed on the Firewall for inbound SMS/MMS to work.

Your help is much appreciated.

 

[Alayyoubi]

Was doing more digging and found IPS (107.178.230.16 & 107.178.230.59) are being blocked on the firewall, I have allowed them and now we are able to receive SMS messages into 3CX.

The question here is are these IP addressed fixed for 3CX SMS/MMS or will they change in the future?

 

[Alayyoubi]

Was doing more digging and found IPS (107.178.230.16 & 107.178.230.59) are being blocked on the firewall, I have allowed them and now we are able to receive SMS messages into 3CX.

The question here is are these IP addressed fixed for 3CX SMS/MMS or will they change in the future?

Can we get an answer for this question from 3cx?

 

[Charles_3CX]

Currently, with sp4, at least, you need to allow all inbound traffic to the HTTPS port for SMS. With sp5 and the way that this version will work with trunk settings, you can lock down the firewall to the SMS provider's servers.

 

[Alayyoubi]

Is SP5 out for Windows?

 

[pangel]

Is SP5 out for Windows?

Update 5 is still in Beta, not recommended for production use, however as of U5 Beta 2 released today, it is also available on Windows. Also read the changelogs: https://www.3cx.com/blog/releases/v18-update-5-beta2/

 

[Alayyoubi]

Update 5 is still in Beta, not recommended for production use, however as of U5 Beta 2 released today, it is also available on Windows. Also read the changelogs: https://www.3cx.com/blog/releases/v18-update-5-beta2/

Hi Pangel,

We have update our 3cx to version 18.0 update 5 build 415 and still can't receive SMS messages without opening port 5001 to the 3CX box. Wasn't this issue supposed to be resolved in update 5?

 

[N_G]

YOu need to allow HTTP to the 3CX server, as this is how the SMS API works. What the IPs are and if they change you have to discuss with your provider. Traffic goes directly from your provider to 3CX.

 

[Alayyoubi]

Hi Nick,
Thank you for the prompt respond, is traffic still going on port 5001 for SMS via the provider?

 

[Alayyoubi]

Great found the IP for Flowroute's API endpoints.

• 52.88.246.140
• 52.10.220.50

Thanks for your help Nick!