INTERNET ACCESS - 3CX SERVER

[10m]

Good day, guys,

I need some help here. I would like to lock down internet access for my 3CX server. I have it on a network behind a firewall. Since it is a server, I would like to set my firewall rules to restrict access to the internet to only where it needs to go. Does anyone know which domains, protocols or ports I should allow the 3CX server to access during install and for normal operation?

 

[JohnS_3CX]

Hi,

Do you use any of the below?

- internet based SIP trunks
- 3CX mobile apps
- Webclient or Windows client for remote workers
- Webmeeting
- STUN Phones
- SBC at remote locations
- 3CX Bridge

If so then you will not be able to lock it down. You will need to keep some ports open:
https://www.3cx.com/docs/ports/

In addition, the system needs access to the downloads and activation server, which will not have static IPs. These addresses may change at any time with no prior notice.

So as you probably understand, this may not be such a good idea if you don't want to sacrifice functionality or lose activation.

 

[10m]

Thanks. That means no restrictions for the server.

 

[eagle37]

There are many ways to lock down the server beyond the default server configurations. Unfortunately, there is no default answer to your question, though. Your options are dependent on your hardware capabilities, your network configuration, the skillset of the person configuring your network, and your end objectives. Your best to review this with someone with a solid understanding of network configuration and security.