WEB client keeps black listing my switch ip

[Mark Jones]

WEB client keeps black listing my switch ip any help this happen twice per day?

 

[craigreilly]

then add ip as white list entry.

 

[Mark Jones]

its our switch IP is that safe?

 

[leejor]

Is there an indication as to why it is being blacklisted? If you can determine that, then you'll know if there is any security issue in whitelisting.

 

[Mark Jones]

how do i find that

 

[nub]

View attachment 10574

how do i find that

What happens when the black list is in place?

Some extensions do not work?
Some trunks do not work?
Some wifi calls do not work?
3cx clients do not work?
all of the above?

The answer to the questions will help filter what could be wrong.

Just a misconfigured firewall could make all incoming sip connections come from an internal ip, but without blocking everything other than your trunk provider could be a real mess.

 

[Mark Jones]

only the client doest'n work

 

[nub]

only the client doest'n work

Most likely that client has a misconfigured credentials.

 

[Mark Jones]

how do i find out which client is it?

 

[nub]

I would start by temporary white listing the ip, and see what client is not working. the activity log will yield much information as well.

 

[ComputerMechanic]

It's a good idea to whitelist the IP of the site(s). But if you try to log into 3CX with the wrong credentials you will be blacklisted - and the log file will tell you the IP and the reason why you were blacklisted.

So do as others have said. Go through your logs.

 

[first10]

its our switch IP is that safe?

you can add to your 3CX whitelist the whole LAN to avoid any blacklist from internal machines; it should be safe cause you're whitelisting a PRIVATE network. Of course if you have any remote access to the lan or backdoor or any kind of stuff that allow access from external networks than you could have some problem. Of course the best way to prevent this is to find who is actually generating this: are you using webclient or anyone has access to the console? sometimes happens that someone saves the wrong password and of course generates that kind of issue

 

[Mark Jones]

Thanks for all the replies, very helpful, I guess some did not see the pic from the activity log, but we will get through this.

thanks again everyone! Greatly appreciate everything.