Lots of intrusion attempts, is it safe to lock down port 5061 to VoIP provider only?

[jcayer]

Like the title says: Is it safe to lockdown port 5061 on the firewall to allow only traffic to/from your VoIP provider?


v.18.xxx (latest)
On prem

I have been running a tightly locked-down set of rules for 5060 and it completely stopped the intrusion attempts on that port. No issues on the phone system, so I'm happy with that for the past 2 years. Was always afraid to do 5061 though. Yes, I am aware that the firewall checker will now fail but am not worried as long as the phones/system are OK.

Thanks in advance for any guidance!

 

[Saqqara]

You can disable the port forwarding if you do not use SIP communications https://www.3cx.com/docs/manual/firewall-router-configuration/

 

[YiannisH_3CX]

Like the title says: Is it safe to lockdown port 5061 on the firewall to allow only traffic to/from your VoIP provider?

Yes it is if you know what you are doing and know how to revert if anything goes wrong. Since you have already locked down port 5060 without issues I don't think you will have any issues with port 5061.
If you run into any issues and need to troubleshoot you can always revert your changes and see if that solves your issue.