Dismiss Notice
We would like to remind you that we’re updating our login process for all 3CX forums whereby you will be able to login with the same credentials you use for the Partner or Customer Portal. Click here to read more.

outing traffic from 3cx to external address

Discussion in '3CX Phone System - General' started by mart3cx, Dec 21, 2010.

Thread Status:
Not open for further replies.
  1. mart3cx

    Joined:
    Jul 1, 2010
    Messages:
    19
    Likes Received:
    0
    Hi,

    i have a problem. The 3cx server is permanently connecting to an extern ip-address on port 80.

    This is a website which has nothing to do with voip or 3cx. When i stop the 3cx services the traffic stops also.

    No maleware or virus was found on the server. The anyone know what this is?

    TX
    Mart
     
  2. leejor

    leejor Well-Known Member

    Joined:
    Jan 22, 2008
    Messages:
    11,113
    Likes Received:
    329
    So what site does the IP translate to? Port 80 is usually used as a HTP port.
     
  3. mhanson

    mhanson New Member

    Joined:
    Nov 6, 2008
    Messages:
    186
    Likes Received:
    1
    Can you be a little more clear?

    So your 3CX is attempting to reach an external IP/Web Site? Can you post some logs or details? How did you discover this? Do you see any kind of effects on system performance?

    Please try to include as much information as possible, as this is a very vague questions, that could have limitless answers. The more you give us, the easier it is for us to try an help :mrgreen:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. mart3cx

    Joined:
    Jul 1, 2010
    Messages:
    19
    Likes Received:
    0
    Hi all,

    our server is going to h t t p : / / a d m i n . v m g l g . c o m / with http.

    Whe have checked this with internal monitoring tools on the switches and also the firewall has logged the same.

    In the 3CX logs is no entry which shows this traffic. But when we stop all 3cx services the traffic stops also.


    There was no virus and no maleware found in the server. The server is w2003 on a virtual machine.

    We use V9 SP5 (until yesterday we used SP4).

    At the moment the traffic is stopped. It were about 500Mb a day.

    The performance is now a little bit better - before the traffic stopped the quality of calls was not so good.

    Thats all information i have at the moment.

    TX
    Martin
     
  5. SY

    SY Well-Known Member
    3CX Support

    Joined:
    Jan 26, 2007
    Messages:
    1,825
    Likes Received:
    2
    Another question.
    Are you sure that 3CX Phonesystem tried to access that server and it was not vice versa?

    Thanks
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. mart3cx

    Joined:
    Jul 1, 2010
    Messages:
    19
    Likes Received:
    0
    I can not say which site is starting the traffic.

    The traffic I can see is the traffic from 3CX to the other server....

    But maybe a virus?
     
  7. SY

    SY Well-Known Member
    3CX Support

    Joined:
    Jan 26, 2007
    Messages:
    1,825
    Likes Received:
    2
    What was the connection point (IP:port) on the host where 3CX Phonesystem is running?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. mart3cx

    Joined:
    Jul 1, 2010
    Messages:
    19
    Likes Received:
    0
    at the moment we have connections to VWP0910.WEBPACK.HOSTEUROPE.DE 87.230.63.149:80 and to VERISIGN 199.7.71.190:80.

    We had also connections to the dns-name in first entry on port 57863 - this has stopped now.

    tx
     
  9. SY

    SY Well-Known Member
    3CX Support

    Joined:
    Jan 26, 2007
    Messages:
    1,825
    Likes Received:
    2
    run
    netstat -ano
    from command line.
    this utility will provide you information about all active network connections (local and foreign addresses, ports, PID of owner etc.)
    Using PID, you can find more information about concrete process in Task manager.

    I'm sure, that PBX doesn't make connections to external resources. There is only one exception - management console checks updates at startup. It obtains brief information about updates available on the server. Connection is not persistent and only small amount of data is downloaded (few kilobytes).
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. nb

    nb Support Team
    Staff Member 3CX Support

    Joined:
    Jun 7, 2007
    Messages:
    2,153
    Likes Received:
    172
    Also you cannot stop one service at a time and see which service stops this traffic?

    Start from IIS first or the web server.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. t332

    Joined:
    Sep 7, 2011
    Messages:
    2
    Likes Received:
    0
    My "3CX Phone System v10.0.18611.1558" make connections to 87.230.63.149:80 too. =(

    If I stopped 3CX server - traffic stopped too.

    Seems, traffic to this host started when I'm make connection to 3CX web-interface.
     
  12. SY

    SY Well-Known Member
    3CX Support

    Joined:
    Jan 26, 2007
    Messages:
    1,825
    Likes Received:
    2
    Could you please read all messages in this topic?

     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. t332

    Joined:
    Sep 7, 2011
    Messages:
    2
    Likes Received:
    0
    Sorry. I do not understand what this phrase refers to this IP-address. I read again and no question now. =)
    Thank you.
     
  14. Bamit

    Joined:
    Aug 3, 2012
    Messages:
    10
    Likes Received:
    0
    I see this was asked about 2-1/2 years ago. Has anyone ever answered this question?

    Our firewall system records that the 3CX server makes quite a few connections a day to this address.

    Thanks.
    .
     
Thread Status:
Not open for further replies.