No incoming calls, receiving only outgoing calls are working

[Holistic Medical Center]

DID and Inbound rules are already set up but I receive this in a firewall checker.

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... failed (How to resolve?)
  • testing port 5060... not reachable (How to resolve?)
  • starting service... done
• testing 3CX Tunneling Proxy... failed (How to resolve?)
  • stopping service... done
  • testing port 5090... not reachable (How to resolve?)
  • starting service... done
• testing 3CX Media Server... failed (How to resolve?)
  • stopping service... done
  • testing ports [9000..9398]... failed (How to resolve?)
    • testing port 9000... not reachable (How to resolve?)
    • testing port 9002... not reachable (How to resolve?)

 

[Lee Cramman]

That's a pretty comprehensive firewall fail... almost as if the firewall on your router hasn't been configured at all.

Each of those "How to resolve" messages is a clickable link with advice but I think you need to go back to basics and read through these:

https://www.3cx.com/docs/ports/
https://www.3cx.com/support/firewall-configuration/

 

[ChrisC_3CX]

I strongly recommend you check what @Lee Cramman mentioned, but, before you do, do try to restart all 3CX Services and run the firewall checker again.

Note: Restarting the 3CX Services will temporarily render the PBX non-operational so consider performing this task during out of office hours.

 

[Holistic Medical Center]

Thanks for your advice,

Now I check the firewall configuration and I check the firewall checker, now I received this error. How can I check the 3CX SIP Server? Thanks in advance

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... failed (How to resolve?)
  • testing port 5060... done
  • starting service... done
• testing 3CX Tunneling Proxy... done
  • stopping service... done
  • testing port 5090... done
  • starting service... done
• testing 3CX Media Server... failed (How to resolve?)
  • stopping service... done
  • testing ports [9000..9398]... done
    • testing port 9000... done
    • testing port 9002... done
    • testing port 9004... done

• • testing port 9396... done
  • testing port 9398... done
• testing ports [10600..10998]... failed (How to resolve?)
• 
  
• testing port 10820... done
• testing port 10822... done
• testing port 10824... full cone test failed (How to resolve?)
• testing port 10826... full cone test failed (How to resolve?)

 

[Lee Cramman]

It's not saying the SIP server has failed, it's saying the SIP server has failed its firewall test. In that particular instance, disabling SIP ALG on your router is probably what is needed. Just google the make / model of your firewall / router and "SIP ALG" to find out how.

You have other failures further down the list to address though.

 

[ChrisC_3CX]

You might also want to read through this guide and check the example configurations we have for some popular firewalls(links at the bottom of the page). You could maybe find them useful if you're using one of them. However, do bear in mind that they may be outdated meaning the same process described might not apply exactly to your case so be cautious.

 

[Holistic Medical Center]

Good day,

our firewall does not have ALG and there's no SIP i tried to search it in google

 

[ChrisC_3CX]

Bear in mind that the SIP ALG test can have 3 values:

1. Not Detected = Good
2. Detected = Bad
3. Failed = Bad

Failed just means that the test did not complete so the SIP ALG test server might not even have been reachable. I think you should review your firewall again to make sure you're not blocking an outbound traffic and confirm you have forwarded all required ports: https://www.3cx.com/docs/ports/

You might also want to consider going over our firewall checker documentation found here which explains exactly how the firewall checker works. Being aware of this information might help you determine what exactly you must change on your firewall to enable it to pass the test.

If you still can't figure out what the problem is you can always reach out to one of our partners who have experience in these types of configurations and will surely be able to help you out or point you in the right direction: https://www.3cx.com/ordering/find-reseller/

 

[Holistic Medical Center]

Thanks for your response. I checked all port forwarding and read the manuals one by one still can't figure out what exactly the problem is and I also checked the VoIP of the firewall. I'm using Cisco Meraki MX and if I reach out one of your partners it's free consultation? Thanks

• resolving 'stun-eu.3cx.com'... done
• resolving 'stun2.3cx.com'... done
• resolving 'stun3.3cx.com'... done
• resolving 'sip-alg-detector.3cx.com'... done
• testing 3CX SIP Server... failed (How to resolve?)
  • stopping service... done
  • detecting SIP ALG... failed (How to resolve?)
  • testing port 5060... done
  • starting service... done
• testing 3CX Tunneling Proxy... done
  • stopping service... done
  • testing port 5090... done
  • starting service... done
• testing 3CX Media Server... done (How to resolve?)
  • stopping service... done
  • testing ports [9000..9398]... done (How to resolve?)
    • testing port 9000... done (How to resolve?)

 

[Lee Cramman]

It might be worth sharing a screen grab of your firewall / port forwarding rules (with external IP's obfuscated for security).

 

[ChrisC_3CX]

This is a pretty old post but, regarding the SIP ALG test failing, maybe also take a look at this hopefully it helps:
https://www.3cx.com/community/threads/try-out-the-new-3cx-sip-alg-firewall-check.50202/post-204390