Limiting Public Access to on-prem Server?

[PhoneEP]

On-Prem server with a NAT'd IP, is there a list of public IP's we can limit access into 3CX by chance? We are seeing quite a few SIPVicious intrusions and was wondering if possible to limit access into the 3CX IP on-prem would help?

Thanks

 

[leejor]

While, in the past this has been attempted by blacklisting all IPs, then whitelisting a few, the best (and correct) way to control traffic is with a proper firewall.

While 3CX is pretty good at stopping a hack, it's not a firewall.

 

[PhoneEP]

I have a firewall and it is blocking the Intrusions. Is there a public list of all IP addresses that would touch 3CX server?

 

[Colorado VoIP]

I have a firewall and it is blocking the Intrusions. Is there a public list of all IP addresses that would touch 3CX server?

once we run the firewall checker, we disable inbound port forwarding on 5060 if our sip trunk using registration. calls still flow correctly. if you're running static IP delivery, just whitelist your carrier on 5060.

 

[SteveITS]

Is there a public list of all IP addresses that would touch 3CX server?

For inbound, it would be your SIP service as mentioned and any mobile apps, web clients, remote phones, etc. 3CX itself doesn't connect in, your server connects out to 3CX.

 

[PhoneEP]

Thank You both!

 

[TheodorosG_3CX]

@PhoneEP You may also refer to this guideline for more information.