problem with firewal after update 3cx

[rnowee01]

The 3cx system updated and since that it cannot contact my siptruncs.
the firewall test fails.
testing port 5060... Mapping does not match 5060. Mapping is 60000.
testing port 5090... full cone test failed
The windows firewall is disabled.
This problem occurred since the last update.

Any suggestions?

Thanks,
Rob Nowee

 

[cobaltit]

Yes, fix your firewall. The 3CX update has nothing to do with it. Windows firewall is only one piece of the puzzle. You have to fix the hardware firewall/router that 3CX is using to get internet access

https://www.3cx.com/docs/manual/firewall-router-configuration/

 

[rnowee01]

Problem is that the firewall is turned off.
And all the ports are forwarded in NAT lik the manual says.
It did work until the last 3CX Update

 

[platinum]

Problem is that the firewall is turned off.
And all the ports are forwarded in NAT lik the manual says.
It did work until the last 3CX Update

Check your NAT.

 

[Saqqara]

As above, check your route rules making sure SIP-ALG is disabled.

 

[Alphabetic]

Sometimes routing tables in the firewall router can go kaput. Try a reboot of that too.

 

[rnowee01]

Nat is setup as the manual says, it did work before.

 

[rnowee01]

SIP-Alg is disabled

 

[JohnS_3CX]

Hi Rob,

You can be reasonably certain that if a remap was detected, and you also see the port of the remap being reported, your NAT is no longer working as you want it to.

You can go a step further, and run a capture from the firewall's interface while running the checker to get hard evidence showing that the external port was remapped. This is not necessary, but you can do it if you want to double check the firewall checker isn't lying to you/

The currently required ports (assuming you left the defaults) can be found here https://www.3cx.com/docs/ports/

If you like, you can share some more details like the model of your router/firewall, in case someone else has the same model they can share their settings exactly as they did them.

- Firewall model and firmware version?
- Windows edition/version/build number?
- 3CX version?

 

[rnowee01]

Hello,
My router is a
Zyxel VMG8825-T50

NAT:

 

[JohnS_3CX]

- Windows edition/version/build number?
- 3CX version?