Port 5000 and 5001 security concern

[sbowers]

We are concerned with the ports that 3CX uses for the web portal. I have clients that want to use the BLF information remotely on their smartphones and their laptops. We have been locking down port 5000 and 5001 from access from the web outside of their environment. The reason for this is that we feel that this is a huge security hole to have the management console port open to the world. Does anyone have any suggestions or plans to change BLF mapping by using different ports so that this works outside of the LAN without jeopardizing the management console? The same for clients. Thanks.

 

[Sopock]

We can see that concern exists for some time:

I really feel that there should be an option for binding the web UI to a different port or providing some sort of default ACL where only RFC 1918 addresses can access the admin dashboard. I'll have a trawl through the feature requests and see if there's anything in there to vote on.

https://www.3cx.com/community/threa...the-admin-dashboard-on-different-ports.47890/

 

[cobaltit]

v15 uses nginx now so you can edit the config to accomplish what you want.