Solved Full cone test failed after port 9500 - New Debian 3CX install

[BSB]

I downloaded the latest version of the Debian 3CX ISO (not PBXExpress) for install with a VPS provider and was finding the firewall test would fail after port 9500; similar to this thread here:

https://www.3cx.com/community/threads/rtp-ports.57330/

I didn't have any firewall rules set in my VPS provider for this instance.

The iptables rules that come preconfigured on that installer seem outdated for the new port ranges the 15.5 uses?
Here's the rule straight after install:
14 ACCEPT udp -- anywhere anywhere multiport dports tftp,sip,5090,afs3-fileserver:9500

I could only get the firewall test to pass after modifying this rule; just wanting to post this here in case any others are facing the same problem and possibly to get it modified in the ISO?

 

[pact]

Just confirming, you downloaded a fresh copy of the Debian ISO directly from the 3CX website?

This issue has been documented, but its been due to people using an older copy of the Debian ISO, so the installer downloads the latest 3CX install, but contains older Linux configuration.

As you've stated, the only fix for the older ISO is to modify the iptables (which a few have done using a guide we posted here: https://www.3cx.com/community/threa...-failures-no-nat-public-ip.57186/#post-241493 )

We have not had a firewall check fail with the current hosted ISO, but did with an older copy we had saved.

 

[BSB]

Ahhh yep, makes sense!

Just went and checked my ISOs; had two on my mahine; same names but one later than the other; must have pushed the wrong one up to the VPS provider.

 

[YiannisH_3CX]

Hello @BSB

As mentioned the latest Debian ISO will configure the updated ports in the IP Table. If you are not sure if you have the latest ISO you can always download it from here:
https://www.3cx.com/phone-system/download-links/

Glad the issue has been resolved.