Upgraded to Pro. No change. IP Blocked

[Werkstatt]

Hello,

Lat week I tried out the free hosted version of 3cx then on Friday I upgraded it to the Pro version. Nothing has changed on my dashboard and it seems I am still on the free version even though it says Pro in my settings. I don't see options like whitelisting/blacklisting ip address and other advanced settings. I mainly ask this because my main IP has been blacklisted and I cannot unblock it.

 

[Charles_3CX]

Updating a 3CX Free to 3CX SMB PRO will not upgrade the system to a dedicated system.

Your subscription is 3CX SMB PRO, and the system remains on SMB with the PRO SMB features.

If you require a subscription for dedicated instances, you can contact our CSR teams using the [email protected] form, and they can assist you further.

Note: No backup can be taken from this current version to restore it to a dedicated instance.

Regarding your Blacklisted IP, you need to access the system from another public IP and remove the dect phone from the Voice &Chat section, wait 24 hours for the blacklist to be removed, and then re-add it using a 3CX SBC or behind a router phone, as Dect phones cannot be added directly without an SBC or router phone.

 

[AaronMoff]

Updating a 3CX Free to 3CX SMB PRO will not upgrade the system to a dedicated system.

Your subscription is 3CX SMB PRO, and the system remains on SMB with the PRO SMB features.

If you require a subscription for dedicated instances, you can contact our CSR teams using the [email protected] form, and they can assist you further.

Note: No backup can be taken from this current version to restore it to a dedicated instance.

Regarding your Blacklisted IP, you need to access the system from another public IP and remove the dect phone from the Voice &Chat section, wait 24 hours for the blacklist to be removed, and then re-add it using a 3CX SBC or behind a router phone, as Dect phones cannot be added directly without an SBC or router phone.

Hi @Charles_3CX - This happened to us today when configuring new router phones. The business IP address was blacklisted.

This has been raised many times on the 3CX forums and recently here https://www.3cx.com/community/threads/ip-blacklist-on-3cx.127019/#post-603972

The 3CX support person said there it was being raised with the security team but nothing has happened. It currently blacklists the IP address after 10 failed authentications, which could be a couple of users who have mistyped or forgotten their passwords.

When is this policy changing? It would be more suitable blacklisting IP addresses after 50-100 attempts for 1 hour, that would be considered a brute-force attack, not 10 attempts. If the 3CX security team cannot not detect when a brute-force attack is occurring, then we have bigger issues.

Thanks.

 

[Charles_3CX]

Hi @Charles_3CX - This happened to us today when configuring new router phones. The business IP address was blacklisted.

This has been raised many times on the 3CX forums and recently here https://www.3cx.com/community/threads/ip-blacklist-on-3cx.127019/#post-603972

The 3CX support person said there it was being raised with the security team but nothing has happened. It currently blacklists the IP address after 10 failed authentications, which could be a couple of users who have mistyped or forgotten their passwords.

When is this policy changing? It would be more suitable blacklisting IP addresses after 50-100 attempts for 1 hour, that would be considered a brute-force attack, not 10 attempts. If the 3CX security team cannot not detect when a brute-force attack is occurring, then we have bigger issues.

Thanks.

This is something completely different to what the user above is reporting and what they did to cause their ip to get blacklisted.

In most cases it’s due to trying to add an IP Phone with incorrect firmware or trying to connect it without a 3cx sbc or router phone.

If you don’t know the password no point trying it 11 times, press forgot password enter your extension number or email and gave a reset password link emailed to you to change it.

 

[AaronMoff]

@Charles_3CX it's the same issue, if a small to medium business with up to 20 users, types in the incorrect password 10 times, their IP address is blacklisted. In what world is that an attempted hack? With our user base, that could be a couple of users trying their password a few times, suddenly the main internet connection is blacklisted and they can't receive calls.

Are you guys being serious about the SMB Pro hosted subscription ($200)? Do you think it's appropriate that a SMB customers phone system doesn't work for 24 hours? Or is the security policy designed to inconvenience the business to force people to upgrade to dedicated hosting at $600? You do see how this looks bad, don't you?

 

[Evolute IT]

@Charles_3CX it's the same issue, if a small to medium business with up to 20 users, types in the incorrect password 10 times, their IP address is blacklisted. In what world is that an attempted hack? With our user base, that could be a couple of users trying their password a few times, suddenly the main internet connection is blacklisted and they can't receive calls.

Are you guys being serious about the SMB Pro hosted subscription ($200)? Do you think it's appropriate that a SMB customers phone system doesn't work for 24 hours? Or is the security policy designed to inconvenience the business to force people to upgrade to dedicated hosting at $600? You do see how this looks bad, don't you?

If they fail 10 times, then yes the IP should lock.

How about teach users to not be idiots and don't retry more than 2-3 times?

Not everything is 3CX's fault.

Also, dedicated systems still exist and you can control that yourself if that makes you happy.