PBX Express Firewall Full Cone Test FAIL

[TecMate]

I'm running a 3CX instance that was deployed using the 3CX PBX Express deployed to Google Cloud.

All is running fine except the firewall test fails with "testing port 5060... full cone test failed"
All other tests passed.

I'm assuming this is because I've narrowed the incoming firewall rules to only allow 5060 from my SIP provider's IP addresses. This was done for obvious security reasons.

After reading that the Full Cone test uses 3CX STUN servers for testing I added them to the firewall rules specifically allow udp:5060 tcp:5060 from
151.80.125.93/32
158.69.11.6/32
151.80.125.98/32
I was hoping this would fix the issue but it hasn't. Any other ideas?

 

[cobaltit]

Yes. Ignore the results if everything is working. If you really want it to work, remove your firewall rules, run test, put your firewall rules back. Firewall test is for when things aren't working. If you know what you are doing you don't need it.

 

[TecMate]

cobaltit: Thanks, yeah that's exactly what I did and now I have a beautiful green tick mark on my 3CX Dashboard.

Though I wish I knew the IP addresses that 3CX uses to run the test so I could setup the right firewall rules for the test... I thought it was the ones I posted above.

 

[cobaltit]

Personally I don't know and don't really care since I know how my setups should be but you could always wireshark and then run the test and you should be able to figure it out from there.