VPN issues with 3CX Mobile app

[t.schuurmans]

Hi All,

We have an customer which uses an VPN in Norway, the PBX is located in The Netherlands.
When he turns on the VPN, 3CX status will turn gray.

When I try it myself I do get the same issue, it will also tell me that the IP has been blacklisted. However it does not show in the blacklisted IP's

Is there a way to not block certain addresses? or Country's?
Is there a way to fix this?

Please let me know!

 

[VoIPTools]

Can you confirm what you mean by "3CX status will turn gray"? Are you referring to one of the soft-phone clients? Do you use physical phones? Are we talking about a VPN at the router, or a VPN on the client PC? If you restart your phone clients after turning on the VPN, do the phones work? I realize if the phones are blacklisted that makes confirming whether they work when the VPN is turned on a little problematic.

More information is needed.

 

[t.schuurmans]

Can you confirm what you mean by "3CX status will turn gray"? Are you referring to one of the soft-phone clients? Do you use physical phones? Are we talking about a VPN at the router, or a VPN on the client PC? If you restart your phone clients after turning on the VPN, do the phones work? I realize if the phones are blacklisted that makes confirming whether they work when the VPN is turned on a little problematic.

More information is needed.

Hi Matthew,

Thanks for reacting.

We are talking about Softphone applications, this problem is on Android and on IOS.
VPN is located in a different country say for example NordVPN and then Norway. The PBX has no firewall.

When the VPN is disabled (WAN is in the netherlands) the user status light is green. When the VPN is enabled (WAN is in Norway) the user status light is grey, and won't connect to the server.

After that a message pops up with the following: This IP has been blacklisted, the app is not able to connect to the server.
I would expect the IP address to show up at blacklisted ip's but it does not.

Like 3CX has their own blacklisted IPS

 

[SteveITS]

3CX has their own blacklisted IPS

They do, under Settings/Security/Anti-Hacking there is "Automatic Global 3CX IP Blacklist."

If the IP doesn't change you can add it as an Allow entry in Security/IP Blacklist. I am not sure whether that will override the global blacklist though.

 

[t.schuurmans]

They do, under Settings/Security/Anti-Hacking there is "Automatic Global 3CX IP Blacklist."

If the IP doesn't change you can add it as an Allow entry in Security/IP Blacklist. I am not sure whether that will override the global blacklist though.

I do see it know, I always tought it was only to collect data.
I'm going to try it out. The VPN WAN ip will change intermitted

 

[t.schuurmans]

I do see it know, I always tought it was only to collect data.
I'm going to try it out. The VPN WAN ip will change intermitted

It works now, but idk if it is worth the risk...

 

[ThomB_3CX]

@hi t.schuurmans

The VPN IP might be in the global blacklist, you don't see those in MC,
NordVPN ranges were blocked as used to scan/brute-force multiple customers.

SteveITS's method should work for you.
You can also use split tunnelling if the VPN client supports it.
It can exclude 3CX from the VPN.

https://support.nordvpn.com/General-info/1596155872/What-is-Split-Tunneling-and-how-to-use-it.htm