Billion UK Forum

I am getting a 3cx 'firewall test' showing all ports 'full cone test failed'. As far as I can tell, the system needs Port forwarding and internet search refers me to 'one to one' nat. Windows Firewall apppears to be correctly configured.

As a newbie I am completely lost!! Can anyone please give me some pointers? Nothing in 3CX suport refering to a Billion router.

I already have the 3CX 'softphone' installed and it has been running fine for 3 years. SIP server is Sipgate.

Thanks

nigelb wrote:I am getting a 3cx 'firewall test' showing all ports 'full cone test failed'. As far as I can tell, the system needs Port forwarding and internet search refers me to 'one to one' nat. Windows Firewall apppears to be correctly configured.

As a newbie I am completely lost!! Can anyone please give me some pointers? Nothing in 3CX suport refering to a Billion router.

I already have the 3CX 'softphone' installed and it has been running fine for 3 years. SIP server is Sipgate.

Thanks

Port forwarding guide is attached,

For one to one NAT, you need a range of public IP's provided by your ISP (one to one NAT maps a internal IP address to a public IP address, with one to one NAT all ports are open)

Many thanks again, b-f, for a stunningly quick reply!

This is from the 3CX port guide
TCP 5000 or 80 (According to guide, for my 3Cx software version (port forwarding not required : "V15: No, this port can only be accessed from the local network"
TCP 5001 or 443 P/Fwd YES
UDP & TCP 5060 P/Fwd YES
UDP & TCP 5090 P/Fwd YES
UDP 9000-9500 (default) P/Fwd YES

So, here is a screen shot of my setup and the 3CX 'firewall test' ??

nigelb wrote:Many thanks again, b-f, for a stunningly quick reply!

This is from the 3CX port guide
TCP 5000 or 80 (According to guide, for my 3Cx software version (port forwarding not required : "V15: No, this port can only be accessed from the local network"
TCP 5001 or 443 P/Fwd YES
UDP & TCP 5060 P/Fwd YES
UDP & TCP 5090 P/Fwd YES
UDP 9000-9500 (default) P/Fwd YES

So, here is a screen shot of my setup

3CX.jpg

and the 3CX 'firewall test'

3CX2.jpg

??

You might need some more rules, (looking at the guide for other router models)

SIP - 5060 TCP/UDP (which you have)
SIPS - 5061 TCP
RTP - 9000 - 9500 UDP (which you have)
Tunnel - 5090 UDP

Once done, also try turning off/disabling the windows firewall, before running the test

Sadly no change, firewall on or off and 'Open Port Check' shows 5000 closed.

nigelb wrote:Sadly no change, firewall on or off and 'Open Port Check' shows 5000 closed.

What about the other ports?? (strange one this one, as port forwarding does work on 8800) your server needs to respond on port 5000 for the port to show as open (if the software is not currently using this port it will show as closed)

Also you can try adding a rule within the security 'IP Filtering Incoming' leave the virtual server rules as is. (but this should not be needed, like your plex setup, just the virtual server rule is needed to open the port)

Tried that, no change. Very confused by the port checks - all emails/web working normally, Plex ok, but whatever I test says 'closed'??

Just wiping the egg off my face this morning............I really wish I understood more!

On the WAN interface settings page, lo and behold, a box to tick labelled 'Fullcone Nat' on the Desktop-PC LAN port. 'Twas unticked and I had not 'noticed' it..... 'Tis now ticked and all seems to be tickety-boo on the 3CX 'firewall test'. I need to check all my other stuff, of course, but the learning curve goes on.

I assume I will still need the port fowarding?

nigelb wrote:Just wiping the egg off my face this morning............I really wish I understood more!

On the WAN interface settings page, lo and behold, a box to tick labelled 'Fullcone Nat' on the Desktop-PC LAN port. 'Twas unticked and I had not 'noticed' it..... 'Tis now ticked and all seems to be tickety-boo on the 3CX 'firewall test'. I need to check all my other stuff, of course, but the learning curve goes on.

I assume I will still need the port fowarding?

Yes you will need to keep you current virtual server rules.

You can remove the incoming packet filter rules though

Apologies, but I am back!

With 'full cone nat' set on the atm interface the 3CX firewall check fails with 'full cone
test failed'. If I set the PTM interface to ''full cone NAT' it does not stay selected.

I still therefore cannot set up the 3cx system and I am totally confused by the whole thing!

I still have the port forwarding set.

Has anyone set up a 3cx system with this router?