pbxservicespush.3cx.com Cloudflare Sorry, you have been blocked

[infocube]

We have problems with push notifications on mobile apps. The error that appears state

Internal exception occured: System.Net.Http.HttpRequestException: Resource temporarily unavailable (pbxservicespush.3cx.com:443) ---> System.Net.Sockets.SocketException (11): Resource temporarily unavailable at

When we hit the service we get Sorry you have been blocked message from cloudflare.

Please advise.

 

[Alejandro_3CX]

Hi @infocube as first step, validate that you are using in this file /etc/resolv.conf as nameserver 1.1.1.1 and nameserver 8.8.8.8 then make sure to allow outbound traffic to port 443, 2197 and 5223 (TCP) for Google Android Push and Apple iOS Push. More information here.

 

[infocube]

Hi Alejandro. The ports are open and also the DNS resolver works OK. When I curl from the PBX to https://pbxservicespush.3cx.com cloudflare returns error.

I also update resolv.conf with the DNS provided and checked network ports.

Any other ideas ?

 

[KyriacosS_3CX]

Hello,

Are Push requests failing with same error? Not curl or browser checks.

Best,
KS.

 

[infocube]

Yes they are failing.

 

[KyriacosS_3CX]

Hello,

There might be some cached/ing issue causing this to persist. If possible restart the PBX services, or even better the whole server, to see if this clears out.

If then it still goes on, can you try some basic network checks, a wireshark capture of the requests and traceroute to pbxservicespush.3cx.com.

Best,
KS.

 

[infocube]

I did a reboot of the vm. This is the traceroute
root@pbx:~# traceroute pbxservicespush.3cx.com
traceroute to pbxservicespush.3cx.com (172.64.152.237), 30 hops max, 60 byte packets
1 control (172.24.28.254) 1.161 ms 1.096 ms 1.053 ms
2 csp3.zte.com.cn (172.24.25.2) 2.096 ms 2.056 ms 2.225 ms
3 * * *
4 * * *
5 cloudflare.gr-ix.gr (176.126.38.5) 10.073 ms 10.379 ms 10.556 ms
6 pbxservicespush.3cx.com (172.64.152.237) 9.962 ms 7.995 ms 7.948 ms

Regarding the wireshark, what should I expect to see ?

 

[KyriacosS_3CX]

After the reboot, is the issue still there?

On the wireshark we can see exactly which node you are talking to, and what is being transferred, in case something looks odd. the trace looks normal.

 

[KyriacosS_3CX]

Hello,

Can you please PM me the FQDN of the PBX that is having this problem?

 

[KyriacosS_3CX]

We have checked and Cloudflare is not blocking your IP, there must be some local network issue - maybe NAT or something on the PBX/VM. Firewall is checking Green?

Please investigate those elements. You can always open a ticket if you need our team to take a deeper look. Just make sure you are following the guidelines. https://www.3cx.com/ordering/