Full cone nat issues

[Spottyjarl402]

Firewall checker says port forwards are not working
Anyone got a clue?
Thanks in advance

 

[leejor]

What type of router are you using? Does the test fail on all ports, or just some? Is there any other Firewall/device, on the network?

More information, on your setup, might be helpful...

https://www.3cx.com/community/threads/information-to-provide-when-requesting-help.67558/

 

[Spottyjarl402]

All ports fail.
This router is a Ubiquiti Dream Machine
This is V18 currently in a virtualbox debian 64 VM for testing reasons the network connection is bridged
There is no other firewall on the network other than the fiber modem which is not configurable but should not be a hindrance

 

[Alphabetic]

Just as a side note, you can remove the 3cx5 and 3cx6 rule

How did you install 3CX? could it be the firewall on the machine.

 

[Spottyjarl402]

Ok managed to get it working but not sure how so can't tell you what I did all I did is port forward 5001 and it worked only one port didn't work and that was port 9308 most likely something else is using it but system doesn't seem to be affected

 

[Alphabetic]

Ok managed to get it working but not sure how so can't tell you what I did all I did is port forward 5001 and it worked

Ah, yes I can see you missed that one.

as per https://www.3cx.com/docs/ports/

 

[Marconi]

Have you disabled ALG on the Dream Machine?

Depending on the version of the UniFi software, you need to do the following in the Dream Machine networking web interface (the settings might be hidden under an advanced tab - I don't have a DM so can't check):

1. Go to Routing & Firewall,
2. Go to the Firewall tab,
3. Click on Settings,
4. Set SIP to Off, and
5. Set H.323 to Off.

Save the settings and then try the 3CX firewall checker again.

 

[ChrisC_3CX]

In addition to what everyone else said, I do suggest giving this article a read here: https://www.3cx.com/docs/firewall-checker/

It explains how the firewall checker works so if you know the firewall you're using well enough, you should be able to determine what parts of it's configuration is preventing the test from succeeding.

EDIT:

There is no other firewall on the network other than the fiber modem which is not configurable but should not be a hindrance

Regarding the ISP's CPE, are you saying it is in bridge mode? If not then do bear in mind that it should also be configured.