Latest Update causes Firewall check to fail

Discussion in '3CX Phone System - General' started by wsiwpg, Aug 9, 2017.

Thread Status:
Not open for further replies.
  1. wsiwpg

    Joined:
    Feb 2, 2010
    Messages:
    3
    Likes Received:
    0
    Seems like I should not have upgraded. My firewall checks always worked now suddenly FAILS. If anybody has an idea I would appreciate it as the link from the error has no info on error at all. My phone system is now down and not operational.

    testing 3CX SIP Server... failed (How to resolve?)
    stopping service... done
    detecting SIP ALG... detected (sent ae556a12 ≠ e76faffe, received c92cc1f9 ≠ dc152fc4) (How to resolve?)
    testing port 5060... Mapping does not match 5060. Mapping is 1024. (How to resolve?)
    starting service... done
     
  2. Rob24h

    Joined:
    Mar 20, 2017
    Messages:
    66
    Likes Received:
    5
  3. GrahamCM

    Joined:
    Aug 10, 2017
    Messages:
    8
    Likes Received:
    3
    I am seeing the same - system prior to upgrade today had no issue with firewall. Now the current system upgrade _and_ a new system installed tonight both report:

    testing 3CX SIP Server... failed (How to resolve?)
    My systems have public IPs (no NAT) and no ALG on the firewall - this appears to be a false positive IMO.
     
    comms1 likes this.
  4. YiannisH_3CX

    YiannisH_3CX Support Team
    Staff Member 3CX Support

    Joined:
    May 10, 2016
    Messages:
    5,514
    Likes Received:
    360
    @GrahamCM

    Is everything else succeeding apart from the SIP ALG test?
     
  5. GrahamCM

    Joined:
    Aug 10, 2017
    Messages:
    8
    Likes Received:
    3
    In the firewall test, everything reports a pass expect the two shown above.

    In terms of the operation of the PBX, nothing else appears to be effected. The PBX is hosted on ESXi in the data center. Remote handsets are registering and making/receiving calls successfully. SIP trunks are working also.
     
  6. 3CXDude

    Joined:
    Oct 1, 2015
    Messages:
    97
    Likes Received:
    24
    Getting the same on a VPS in OVH since SP1 -
    upload_2017-8-10_15-57-1.png
     
  7. wsiwpg

    Joined:
    Feb 2, 2010
    Messages:
    3
    Likes Received:
    0
    We are using Windows Firewall and I am not sure I can just turn off SIP ALG Feature.
    Also I am not sure why I get the 5060 mapping does not match. Port is mapped as it was before upgrade but I am now getting this message AND most importantly that issue causes calls to be dropped after about 2 minutes. I don't know where to look anymore for that .....
     
  8. mgi_p

    Joined:
    Aug 10, 2017
    Messages:
    1
    Likes Received:
    0
    Hi

    We also have this issue
    We have our 3CX as a google cloud vm instance
    upload_2017-8-10_15-3-43.png
    The thing is that until yesterday everything was ok until today that we had some problems. Right now we do not receive audio fom calls received from and made to voip trunk. I TCPdumped to see the traffic in the 3cx server and I only see one direction of RTP streams (from server to voip provider), and no RTP traffic in the other way.

    This is very strange beacause the firewalls rules for the google cloud instance are very simple and worked before..

    Can this be related to the "detecting SIP ALG Failed"?
     
  9. gulib

    Joined:
    Aug 3, 2017
    Messages:
    24
    Likes Received:
    2
    same issue....google compute engine.
     
  10. YiannisH_3CX

    YiannisH_3CX Support Team
    Staff Member 3CX Support

    Joined:
    May 10, 2016
    Messages:
    5,514
    Likes Received:
    360
    Please try running the firewall test now as there was an issue with a service on the SIP-ALG server which is now resolved.
    Please provide us a feedback of your results.
     
  11. gulib

    Joined:
    Aug 3, 2017
    Messages:
    24
    Likes Received:
    2
    It works correctly now. Shows "Not Detected" on google compute engine.
     
  12. YiannisH_3CX

    YiannisH_3CX Support Team
    Staff Member 3CX Support

    Joined:
    May 10, 2016
    Messages:
    5,514
    Likes Received:
    360
Thread Status:
Not open for further replies.