Firewall test Failed after upgrade to v16 Update 8a

[Yellow_Flash]

Hello Team,

We were running on v16 update 5 and upgraded to v16 update 8 today
The firewall test worked fine before i started the upgrade.
And after the upgrade, i'm facing issues with a number of ports failing full cone test
And the ports keep changing as shown, when i did firewall test twice.
First one,


Second one,





The ports that passed the test in the first time, have failed the test second time and vice versa too.

Why is this happening?
Can someone let me what can be done here?

Thank you

 

[ClaudioBassani]

Hi,
It happened me too. On my firewall (zyxel) I had to create a service that used ports 5001 to 11000 and authorize WAN to LAN authorization in the firewall policy configuration. The other configurations (nat, port forwarding) remained unchanged. Once this is done, the test has been passed.However, I think that each type of firewall has its own specific configuration.Very strange, with the V16 it worked without these last configurations ...

 

[cobaltit]

Are you saying you ran the test right before the upgrade and it passed? Or are you saying it was run months and months ago and you ran it after v18 upgrade and it passed?

And are you experiencing an actual issue, or is it just the firewall test not passing that is the problem?

 

[Yellow_Flash]

Are you saying you ran the test right before the upgrade and it passed? Or are you saying it was run months and months ago and you ran it after v18 upgrade and it passed?

And are you experiencing an actual issue, or is it just the firewall test not passing that is the problem?

Yes, I ran the firewall test before starting the upgrade. That time it passed the firewall test.
After the upgrade, I did it again, and it didn't pass the test.

I'm not experiencing any issues as its weekend and nobody is using the phones. It was just that the firewall test not passing.

And today morning, I did the test again and everything passed. We haven't made any changes to the system today and yet everything passed. Weird to say the least. I will do the test again in the evening to see what will be the output.
Thank you

 

[cobaltit]

If you have a smart device it could have detected the two tests close together as some sort of probe or attack and blocked some of the ports. Or it could just be a fluke.

 

[bmfid]

Ive been doing updates all weekend. This has been happening on an off the whole time. I tested a few systems this morning, that have been in production for some time when no recent changes or updates, and an already passed firewall test - this is happening there too. Suspecting 3cx testing servers are acting up - might not be your hardware/install! I only reloaded a system 3 times before I came to the conclusion. More coffee required...

 

[NickD_3CX]

We have made some upgrades to our STUN Servers as well as add 1-2 additional ones over the past few days. The effects should have gone in today, so any kind of "on and off" problems with the Firewall Checker should be in the past from today.

If you do run into any problems, let us know.

To be clear, if all ports are failing on every run, then it probably IS your Firewall.