Full cone test failed

[McDowellster]

Gents,

I have a PFSense router running our network here. It's configured with a separate WAN connection for our 3CX installation. Rules are set correctly, phone calls work over SIP and our trunk is fine.

Outbound rule is set, the 3cx server has static port set. Before I configured this the firewall test would report unmatched port mapping. Now I'm getting "full cone test failed".

Outbound rule:
WAN_3CX x.x.x.x/32 * * * WAN_3CX address * YES

Port forward:
WAN_3CX TCP/UDP * 5090 WAN_3CX address 5090 10.0.11.250 5090
WAN_3CX TCP/UDP * 5061 WAN_3CX address 5061 10.0.11.250 5061
WAN_3CX TCP/UDP 3CX_STUN_Servers 9000 - 9255 WAN_3CX address 9000 - 9255 10.0.11.250 9000 - 9255
WAN_3CX TCP/UDP * 5060 (SIP) WAN_3CX address 5060 (SIP) 10.0.11.250 5060 (SIP)

I will be setting a source address of our SIP provider after this thing passes it's bloody test...

Any ideas?

 

[craigreilly]

v15 I am having Firewall issues too - but the port fail is random. one time port 9002 the next 9007. next time 9003, etc.
My system works 100%. So, I do not care that the firewall test failed.
(Using Mikrotik CCR1009)

 

[McDowellster]

I am having a weird issue that is with 3cx support. Ever had a DID call not go to voicemail, instead return a busy signal? Works fine when DID routes to an IVR first.

 

[craigreilly]

not even ring the extension? or ring extension then goto busy?

 

[eagle2]

@craigreilly:

Have a look at this article: http://stevedischer.com/pmtu-and-mss-discovery-issues-resolved-with-mikrotik/
I've implemented into my CCR1009 for MSS above 1380 bytes. This solved an issue with remote Android SIP client (see: https://www.3cx.com/community/threa...t-working-remotely-with-3cx-v14sp3-pbx.46768/) and surprisingly 3CX firewall check issue was resolved (regardless of MSS is for TCP packets).

 

[McDowellster]

not even ring the extension? or ring extension then goto busy?

Extension rang, works if answered, drops if sent to VM.

The SIP trunk provider was at fault it turns out. Waiting on details.