i got this issue when i run the Firewall Check

[irfan2]

hi

 

[irfan2]

i have done my portforwarding in my dubai branch on-premise like this as for testing purpose but firewall issue couldn't resolve what i have to for now?
firewall testing comes likes this.now what i have to do ?pls reply

 

[bitn2]

Again, please follow the manual and find someone who will help you with networking. Most portforwardings are wrong or missing.

 

[irfan2]

here there is no networking team, i attached my portforwarding screenshot can you check that and tell me what i have done mistake in that?

 

[NicholasP_3CX]

Your firewall is modifying the source ports. Check for port remapping, and disable it.

 

[bitn2]

here there is no networking team, i attached my portforwarding screenshot can you check that and tell me what i have done mistake in that?View attachment 45006

80,5001,4545 are wrong, you dont need them. 5090, 5060 are missing.

 

[irfan2]

Your firewall is modifying the source ports. Check for port remapping, and disable it.

how can i disable port remapping ?i have no option in my router to disable it ,i have ZTE router in my office and i only saw a SIP ALG disable option in it,but disabling it wouldn't makes any change. if you want i can provide my scrnsht of my router interface

 

[bitn2]

SIP ALG needs to be disabled and ALL the correct ports needs to be forwarded. Which ZTE router do you have?

 

[Alphabetic]

Your IP address belongs to Etisalat so Im assuming youre on a CGNAT so it wont be possible to port forward. You'll need to move your 3CX to the cloud or get a static IP address.

 

[irfan2]

SIP ALG needs to be disabled and ALL the correct ports needs to be forwarded. Which ZTE router do you have?

ZTE MC801A router.
can you tell how i have to do that?

 

[irfan2]

Your IP address belongs to Etisalat so Im assuming youre on a CGNAT so it wont be possible to port forward. You'll need to move your 3CX to the cloud or get a static IP address.

do u mean to get a static ip for my router?

 

[Alphabetic]

do u mean to get a static ip for my router?

From your ISP. They wont be allowing port forwarding.

 

[irfan2]

From your ISP. They wont be allowing port forwarding.

but here some of ports are correctly configured ,why this?

 

[Alphabetic]

uPnP maybe idk. Question for your ISP.

 

[irfan2]

it is very urgent for setup a 3cx environment by integrating 3cx on-premise and hosted by 3cx ,as we are preferring a low cost ideas for implement this?what you guys are suggesting for it?

 

[Alphabetic]

Check with Etisalat the cost for having your own public IP address to enable you to port forward.

Then see what this cost is vs hosting 3CX in the cloud and using an SBC onsite and go from there.

 

[NicholasP_3CX]

I would suggest coming into contact with a 3CX partner in the UAE to assist you with the network configuration due to their experience with dealing with local ISPs.

https://www.3cx.com/ordering/find-reseller/

 

[irfan2]

can u provide a confirmation that can i use 3cx hosted in UAE region and can i provide it to customers?

 

[irfan2]

if it have a CGNAT issue can i use additional router or firewall to overcome this issue?

 

[irfan2]

1. Use a Third-Party Port Forwarding Service
2. Use a VPN with Port Forwarding
BY USING THESE METHOD CAN I BYPASS MY FIREWALL ISSUE?