Latest Update causes Firewall check to fail

[wsiwpg]

Seems like I should not have upgraded. My firewall checks always worked now suddenly FAILS. If anybody has an idea I would appreciate it as the link from the error has no info on error at all. My phone system is now down and not operational.

testing 3CX SIP Server... failed (How to resolve?)
stopping service... done
detecting SIP ALG... detected (sent ae556a12 ≠ e76faffe, received c92cc1f9 ≠ dc152fc4) (How to resolve?)
testing port 5060... Mapping does not match 5060. Mapping is 1024. (How to resolve?)
starting service... done

 

[Rob24h]

Read this: https://www.3cx.com/blog/docs/sip-alg-firewall-check/

And disable SIP ALG on your firewall.

 

[GrahamCM]

I am seeing the same - system prior to upgrade today had no issue with firewall. Now the current system upgrade _and_ a new system installed tonight both report:

testing 3CX SIP Server... failed (How to resolve?)

• detecting SIP ALG... failed (How to resolve?)

My systems have public IPs (no NAT) and no ALG on the firewall - this appears to be a false positive IMO.

 

[YiannisH_3CX]

@GrahamCM

Is everything else succeeding apart from the SIP ALG test?

 

[GrahamCM]

In the firewall test, everything reports a pass expect the two shown above.

In terms of the operation of the PBX, nothing else appears to be effected. The PBX is hosted on ESXi in the data center. Remote handsets are registering and making/receiving calls successfully. SIP trunks are working also.

 

[3CXDude]

Getting the same on a VPS in OVH since SP1 -

 

[wsiwpg]

We are using Windows Firewall and I am not sure I can just turn off SIP ALG Feature.
Also I am not sure why I get the 5060 mapping does not match. Port is mapped as it was before upgrade but I am now getting this message AND most importantly that issue causes calls to be dropped after about 2 minutes. I don't know where to look anymore for that .....

 

[mgi_p]

Hi

We also have this issue
We have our 3CX as a google cloud vm instance

The thing is that until yesterday everything was ok until today that we had some problems. Right now we do not receive audio fom calls received from and made to voip trunk. I TCPdumped to see the traffic in the 3cx server and I only see one direction of RTP streams (from server to voip provider), and no RTP traffic in the other way.

This is very strange beacause the firewalls rules for the google cloud instance are very simple and worked before..

Can this be related to the "detecting SIP ALG Failed"?

 

[gulib]

same issue....google compute engine.

 

[YiannisH_3CX]

Please try running the firewall test now as there was an issue with a service on the SIP-ALG server which is now resolved.
Please provide us a feedback of your results.

 

[gulib]

It works correctly now. Shows "Not Detected" on google compute engine.

 

[YiannisH_3CX]

Please post your results to the following thread so we can have all results under one thread for better management and better communication.
https://www.3cx.com/community/threads/try-out-the-new-3cx-sip-alg-firewall-check.50202/