Solved FYI - Firewall Check

[DrainBamaged]

Good Day,

Found something last night and this may save you some grief if in the same situation.

If you have country or geolock restrictions on your firewall, the firewall test may fail. We had an issue yesterday. I ran the firewall checker and saw this:



After a long session of checking various causes we turned off the country restrictions on the FW access rule to get this:



It would be helpful to know where the FW check runs from (Specific IP's would be helpful) so we can add that to our exception list. As we had US and Canada in the allowed list, it isn't coming from there. Restricting country access dramatically cuts down on hack attempts.

Anyway, FYI in case you see something similar. May save you some time.

 

[ChrisC_3CX]

Some of the servers used for the Firewall checker can be seen in the firewall test itself:




However, there are some servers that contact the 3CX PBX during the test that do not have any DNS records and may change at any time. That said, I recommend disabling any country restrictions on your firewall when running the 3CX Firewall checker and then just re-enabling when it's done.

 

[DrainBamaged]

Thank you Chris. Always good to understand the background processes.

 

[ChrisC_3CX]

You're welcome! Please don't hesitate to post a new thread should you require additional information or assistance.