rtp ports

[next2]

Hello,

When running the firewall tests, the RTP ports check fails after port 9500. After that, I get 'Full cone test failed' messages till port 10743. I doubt we'll ever need so many open ports, so I'd like to reduce the number of RTP ports and limit this from 9000 through 9500. I can't see anywhere the option in the GUI, so I suppose we'll have to connect to the console and adjust some config files ? How can we do this ? We are running a PBX Express (linux based) instance.

Thank you !

 

[eddv123]

Hi,

I am almost certain that you can't limit the RTP ports in the 3CX PBX like this:
https://www.3cx.com/docs/ports/

What you can do however is limit the amount of port accessible in the firewall device infront of the PBX. For PBX Express (or hosting in the cloud) you may have ACL's you can alter (for example AWS have security groups where you can do this) unless of course your system is public IP address facing.

 

[next2]

Hello Eddv,
I have an other PBX Express running on another VPS server, and I see the Firewall test starts from port 9000 to 9255. So I think I changed this manually somewhere, but the problem is that I cannot remember where/how !!!

 

[YiannisH_3CX]

I have an other PBX Express running on another VPS server, and I see the Firewall test starts from port 9000 to 9255. So I think I changed this manually somewhere, but the problem is that I cannot remember where/how !!!

Please note that up until V15.5 SP5 the PBX will use ports 9000 to 9255 .Since the latest release however the PBX will now use ports 9000 to 10743 so this is not something you changed.

The reason why the firewall checker fails after port 9500 is probably because the IP tables were not adjusted to allow the extra ports.

 

[next2]

Hi Yiannish. Thank you for the info. The server is a PBX Express instance, hosted at OVH. The installation is straightforward and does not give any option (I've used the wizard on 3cx website)… I can't see how I could change anything in the IP Tables. Do I really need to update any setting ? If so, how ?

 

[YiannisH_3CX]

When did you perform the installation ?Was it before or after the SP5 release?

 

[next2]

The PBX Express instance was installed 2 days ago, so I suppose the seed was already including SP5 ? Current production version is 15.5.0

 

[YiannisH_3CX]

If the PBX was installed 2 days ago then the IP tables should be correct. You should check the OVH firewall and adjust the ports there so that the firewall checker passes.