Port 5060 remapped to 2532. Sonicwall. Hours spent.

[redhamilton]

This all started with a support call to a new SIP provider, SIP.US. I couldn't get an older Panasonic PBX connected. I gave the guy remote access to the Sonicwall and he bricked it. So I restored from a backup. Unfortunately the backup was old and before the installation of 3cx. No problem, I'll just recreate the NAT polices, access rule and be done. NOPE!
Everything checks out except port 5060, Its remapped to 2532 without fail. Disable Source port remap is of course checked in the outbound NAT. I've moved these 2 NAT policies to the very top of processing priority. Enable consistent NAT is checked. I've excluded the LAN address object from the content filter. Theres really not much to these rules, thats why I'm so at a loss. I remember something about a NAT hotfix from Sonicwall a few years ago. I was on SonicOS 6.2.x so I went ahead and upgraded to the latest 6.5.4.5-53n to be sure that any hotfixes would be wrapped up. No changes at all. Still the same stupid remapping. I am completely lost. 3cx version is 15.5.5. I thought I might try upgrading to v16 or at least 15.5 SP6. I can't see any reason that would make any differnce at all in a port remap, but I'm just at the end of what I can think of. Can anyone help?

 

[Chris-MBN]

red,

I use SonicWALL's exclusively for 3CX and it sounds like you might have SIP transformations enabled. Did you follow this guide? https://www.3cx.com/docs/sonicwall-firewall-configuration/

 

[redhamilton]

Thanks for the reply. I did indeed follow that guide. SIP transformations are/have been disabled. I upgraded to 15.5 SP6 and that has at least partially fixed the firewall check failure. The SIP server section now passes with port 5060 checking out properly. The 3CX Media Server section fails through the entire 2nd port range [10600..10998].

 

[Chris-MBN]

That sounds like the Service Object for your port range is not set correctly.