So many ports ?- firewall '[9000..9398]'

[alex22alex]

Hello,

We have around 20 extensions of which maybe 5 are logged in outside of our office, we only have max 8 simultaneous calls.

Do i really need to open such a large range of ports ? The firewall checker tests to large sequentual batches

[9000..9398]
[10600..10998]

I currently only have 50 ports open in the first range and we are seeing some odd drops in 3CX could it be that i don't have the rest of the ports open

Thanks. Alex

 

[SteveITS]

The ports 3CX uses for various features are at https://www.3cx.com/docs/ports/

 

[leejor]

One issue that cropped up a while ago when the port range was extended in a new version, was that 3CX was incrementing the port number used for each new call. If all ports were not open, it eventually got to the point where there were calls with no audio, until 3CX was re-booted, and the count started all over.

https://www.3cx.com/community/threads/no-sound-on-external-calls.59455/

 

[JohnS_3CX]

Hello,

Yes you definitely need to open the entire range from 9000 to 10999.

Those ports are used by the webclient, remote phones using STUN, web conference dial in, and trunks.

If you do not open the entire range, you will eventually end up with no audio in your calls.

 

[alex22alex]

Hi Everyone,

Thanks for the messages, yes we have been seeing some audio loss on calls. I just wanted to be sure before i opened such large range that it was really necessary.

 

[Alphabetic]

If you are that concerned then I suggest you SBC your remote sites or configure your network parimeter firewall to allow your remote sites access to these ports only.

 

[JohnS_3CX]

If you are that concerned then I suggest you SBC your remote sites or configure your network parimeter firewall to allow your remote sites access to these ports only.

And any internet based trunk provider too, since they will also need to send you audio via those ports