Port Change on 3CX Debian Build

[1Stream_Steve]

HI All

Is it possible to change the default ports on the 3CX Debian Build? I am wanting to deploy it but 5060 is very quickly picked up and scanned from the public internet so I'd prefer it can be something else.

Many Thanks

Steve

 

[Saqqara]

Port 5060 is used by Sip trunks, so changing it is not advised as you may got get your sip trunks to work

Have a look at https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-2/ , https://www.3cx.com/blog/unified-communications/dont-be-that-guy-vol-3/

If could restrict access to port 5060 down to your sip provider IP's using your firewall

 

[1Stream_Steve]

Brilliant!
My trunks will be internal to a FreePBX host or directly on a Trust basis to my provider on my MPLS so if its not needed from the Public internet thats not a problem then.

 

[1Stream_Steve]

What about HardPhones? Do they have to be 5060?

 

[Saqqara]

What about HardPhones? Do they have to be 5060?

Yes, hard phones use 5060

 

[JohnS_3CX]

Do they have to be 5060?

They don't have to be 5060 per se. They will contact the PBX at any port you have it deployed to (so 5060 at the moment in your case).

They can use a different port if you change your 3CX SIP port to something other than 5060, but this would require you to take a backup and reinstall 3CX. Changing the port will not stop you from being scanned - consider everything before you decide what to do.

If your SIP port is only used on the LAN, then simply don't forward it on your firewall and you're done - nothing else needs changing, and no scanning can reach 3CX. The only limitation is that you cannot have STUN phones, but that can easily be solved either with our SBC or our apps.

 

[1Stream_Steve]

Thanks John, I haven't installed anything so if its done at this point thats great as I wanted to find out before putting any work in.