Full cone test failing on pfSense

[MDonnelly]

I am running 3CX in a test environment at home using pfSense as the firewall.

I have configured all the settings as per https://www.3cx.com/docs/pfsense-firewall/ (though I used the ranges for the RTP twice for the specific ports rather than all the ports in that range.

When I run the tests they all succeed but as soon as they get to port 9124 they begin to fail and I have now run out of ideas as to why.

I have attached images below of the configurations and errors I am getting.

If anybody can help it'd be much appreciated.

 

[NickD_3CX]

Hi there!

Well the first thing I should point out is that the RTP Port range rule is wrong, you need to forward the full range 9000-10999.
The fact that the Firewall Checker checks only the first and last 400 ports does not mean that the in-between rules are not used, we just do this to save time when running the Firewall Checker.

From the guide you mentioned, have you tried what is mentioned in step 3 and step 5?

 

[MDonnelly]

Hi Nick,

Thanks for the response

To begin with, I tried it with the full range. Changed it over to see if it made a difference at all it didn't. I have now changed it back to reflect what is in the guide.

I have also tried what is mentioned in 3 + 5 again just to be sure but still had no luck

 

[NickD_3CX]

The settings to look correct, so this is a bit strange. Is it always the exact same ports that fail, or will a port one time be 'failed' but on another run be 'passed'?

Also you said you have this setup at home. Do you have any other network equipment, like an ISP router in front of it that could be causing this?
Also could the bandwidth have anything to do with it, is some other bandwidth-intensive task happening at the same time you are running the test?

 

[MDonnelly]

Yeah it's always the same ports that pass and fail.

Hadn't even thought of my router, I will have a look at that when I next get a chance to. It probably is this thinking about it.

No nothing else is going on in the house at the same time that would interrupt the task from taking place. It always runs smoothly up until port 9124.

I'll have a look at my router however and let you know how I get on