I keep getting tons of Warning event ID 30051 on my logs. Looks like a bot is trying to push through scam calls but 3cx is catching it. Is there any way to stop this, so it doesn't keep clogging up my logs with multiple events every hour?
The port that the log shows carries, so it looks like it's just at random.
should I only allow traffic from my SIP providers IP on port 5060?
As it is now, it passes the firewall check. I believe if I white listed IPs and limited to 5060, then it wouldn't pass? I believe I don't haver any stun phones? I am not that familiar with that, but it seems I have 2 on a SBC, soft phones and a local phone.
A bit about my system.
3cx ENT V20
self hosted on prem with Debian version 20.0.1.731, but can upgrade to the new 20.0.2.688
2 SBC phones, 1 local phone and a few soft phones.
my system runs on fiber 99% of the time, fail over to Comcast.The delivery of which ISP is managed by the firewall.
The port that the log shows carries, so it looks like it's just at random.
should I only allow traffic from my SIP providers IP on port 5060?
As it is now, it passes the firewall check. I believe if I white listed IPs and limited to 5060, then it wouldn't pass? I believe I don't haver any stun phones? I am not that familiar with that, but it seems I have 2 on a SBC, soft phones and a local phone.
A bit about my system.
3cx ENT V20
self hosted on prem with Debian version 20.0.1.731, but can upgrade to the new 20.0.2.688
2 SBC phones, 1 local phone and a few soft phones.
my system runs on fiber 99% of the time, fail over to Comcast.The delivery of which ISP is managed by the firewall.
Last edited:
