IP Blacklist - allow

[Harrisonm]

I would like to know why the some public ips keeps on getting blocked even if we allow the ip on the IP blacklist tab.
scenario1

Two users connecting to the same home wifi with same public ip
both user when the type whatismyip on the phones gets same public ip

user1 has ios - ip does not get blocked
user2 has android - ip gets blocked

how come we unblock the ip but android keeps being blocked but ios does not get blocked

 

[Saqqara]

When the IP address gets blacklisted, look at the reason why

I would resend the welcome email again to user2, and get them to Scan the QR code again to setup the phone again.

 

[Harrisonm]

ok thank , let me try that , do you know what causes this issue?

 

[Harrisonm]

I have resend the welcome email and reconfigured still happening

 

[craigreilly]

3cx version?
server version?
firewall passed?
extensions set up the same under restrictions?

 

[Saqqara]

Before removing the IP from the blacklist, what is the reason - in will be in the description

 

[JohnS_3CX]

Hi @Harrisonm

To recap all the above

- Check the reason why it was blacklisted
- State your OS Version
- State your PBX Version
- State the Android App version

All the above are very useful in tracking down the issue. Make sure you collect the full and exact versions before reporting them.

 

[leejor]

Since the phones using the Android and iOS Apps should both be using the tunnel, the Activity Log should show if the issue, one is having, is the same, or, if, perhaps, there is an extension setting, that is different, on the one that fails.

 

[Saqqara]

Make sure ext is configured to use 3CX tunnel - Phone Provisioning - 3CX app



Also under Options - 'Block Remote Tunnel Connections (3CX App connections with Tunnel enabled & SBC will be blocked)' is unticked.

Any changes your will have to reprovision the device

 

[craigreilly]

Gosh - I never went to the Phone Provisioning - 3cx App - to see that "Use 3cx Tunnel" is basically duplicated there (from the Options page - Block Remote tunnel).

 

[JohnS_3CX]

@craigreilly it's not exactly duplication:

- one option decides whether you auto-provision it or not across apps that belong to that extension (some can use it some can chose not to use it if you wish). You can still enable/disable it manually from the windows app for example.

- the other option is there to block tunnel connections period

 

[Harrisonm]

I have checked this and all is configured as below still get the ip blocked - please help

Make sure ext is configured to use 3CX tunnel - Phone Provisioning - 3CX app

View attachment 16150

Also under Options - 'Block Remote Tunnel Connections (3CX App connections with Tunnel enabled & SBC will be blocked)' is unticked.

Any changes your will have to reprovision the device

ext is configured to use 3CX tunnel - Phone Provisioning - 3CX app

 

[JohnS_3CX]

@Harrisonm kindly refer to message #7 again

 

[Harrisonm]

Good after sorry for taking long : see below versions as requested

linux ubuntu 18.4
3CX enterprise version 16.0.5.612
Android version 9

 

[JohnS_3CX]

I'm not sure if that's right.. We only support 3CX V16 running on Debian 9

 

[Harrisonm]

My apologies I had looked at the wrong sever. We are running on Debian.



Distributor ID: Debian

Description: Debian GNU/Linux 9.9 (stretch)

Release: 9.9

 

[JohnS_3CX]

No problem, that's fine.
We are just missing one final detail below:

- OS Version = Debian 9
- PBX Version = 16.0.5.612
- Android OS Version = 9

- Android App version = ???

 

[Harrisonm]

- Android App version = 3cx version 16.3.0.81

 

[JohnS_3CX]

Ok thanks. Here is a test you can try:

1. Ask the user to delete the app from their phone
2. Create a brand new extension, and don't change any settings, leave everything default.
3. You can add the email address of the user and send them a welcome email for this new extension
4. Send the user a welcome email for this new Test Extensio
5. Ask the user to install the app again fresh, and provision it with the new extension

Now wait and see if they get blacklisted again. They should not this time.

 

[Harrisonm]

No sure if this will be appropriate solution , we have hundreds of extensions and I do not want to create new extension every time I have this problem as users will prefer to keep the same extension