Port Forwarding

[intermedia]

Hello,

We are currently running self hosted version 18.0 (Build 965). We have set up port forwarding only for port 5060 and RTP ports and allow traffic only from our SIP Trunk Providers. We figured we don't need any other port forwarding as we will be running only with local IP Phones and softclients (within premises). So far the system is running fine. What I would like to know is if we should open any other port for communication with 3CX (activation, etc.).

 

[Saqqara]

Check out https://www.3cx.com/docs/manual/firewall-router-configuration/

As you have no externally devices, you only need to allow port 5060 and rtp ports in.

 

[intermedia]

As you have no externally devices, you only need to allow port 5060 and rtp ports in.

Thanks for your quick response. That is our current set up. However, in some thread about port forwarding, which I can no longer find, there was a mention to allow traffic from "activate.3cx.com" and some other servers. Do you happen to have any info on this?

Other Services (SMTP & Activation)​

A 3CX System connects to various services provided by 3CX in the cloud.

• SMTP Service: Cloud Service for SMTP Messages
  smtp-proxy.3cx.net, 2528 (outbound, TCP)
• Activation Service: Activation of 3CX Products
  activate.3cx.com, 443 (outbound, TCP, uninspected traffic)
• RPS Service: Provisioning of Remote IP Phones
  rps.3cx.com, 443 (outbound, TCP)
• Update Server: For updates of 3CX System and firmware of IP Phones
  Downloads-global.3cx.com, 443 (outbound, TCP)

As our installation is only local and on-premises, it seems we are only interested for the activation service. But since it is outbound traffic, I guess there is no need for any forwarding. Is that correct?

 

[Saqqara]

As our installation is only local and on-premises, it seems we are only interested for the activation service. But since it is outbound traffic, I guess there is no need for any forwarding. Is that correct?

This is correct, outbound traffic do not need portforwarding setup.

Just make sure you are not blocking required 3cx ports on the firewall.

 

[intermedia]

Right. Thanks for your help!