responso firewall

[anonymous]

buona sera,
sono alle prese con la configurazione del mio primo centralino 3cx.
ho provato ad eseguire il test firewall e come visibile qui sotto ottengo una serie lunghissima di warnings.
premetto che ho forwardato tutto e le porte sono aperte. ho provato anche a mettere il centralino in dmz ma il risultato non cambia.
Mi sembra che tutto funzioni piu' omeno bene ma sto avendo dei problemi con le chiamate verso la telefonia mobile con dei ritardi nelle risposte di quasi 30 secondi... (un po' troppi) ...mi chiedevo se il problema potesse avere qualche attinenza. le chiamate sulle linee tradizionali invece funzionano abbastanza bene.
Aggiungo che stiamo utilizzando una linea adsl di BT e che non ho accesso alla configurazione del loro router. l'unica cosa che sono riuscito ad ottenere è un nat 1 a 1 sull'ip intrno del firewall dove poi gestisco il forwarding interno... quindi di fondo un doppio nat :cry:

qualche suggerimento?


3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

: Phase 1, checking servers connection, please wait...
: Stun Checker service is reachable. Phase 1 check passed.
: Phase 2a, Check Port Forwarding to UDP SIP port, please wait...
: UDP SIP Port is set to 5060. Response received WITH TRANSLATION 15954::5060. Phase 2a check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/

: Phase 2b. Check Port Forwarding to TCP SIP port, please wait...
: TCP SIP Port is set to 5060. Response received WITH TRANSLATION 15954::5060. Phase 2b check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/

: Phase 3. Check Port Forwarding to TCP Tunnel port, please wait...
: TCP TUNNEL Port is set to 5090. Response received WITH TRANSLATION 15955::5090. Phase 3 check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/

: Phase 4. Check Port Forwarding to RTP external port range, please wait...
: UDP RTP Port 9000. Response received WITH TRANSLATION 15956::9000. Phase 4-01 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9001. Response received WITH TRANSLATION 15957::9001. Phase 4-02 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9002. Response received WITH TRANSLATION 15958::9002. Phase 4-03 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9003. Response received WITH TRANSLATION 15959::9003. Phase 4-04 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9004. Response received WITH TRANSLATION 15960::9004. Phase 4-05 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9005. Response received WITH TRANSLATION 15961::9005. Phase 4-06 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9006. Response received WITH TRANSLATION 15962::9006. Phase 4-07 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9007. Response received WITH TRANSLATION 15963::9007. Phase 4-08 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9008. Response received WITH TRANSLATION 15964::9008. Phase 4-09 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9009. Response received WITH TRANSLATION 15965::9009. Phase 4-10 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9010. Response received WITH TRANSLATION 15966::9010. Phase 4-11 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9011. Response received WITH TRANSLATION 15967::9011. Phase 4-12 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9012. Response received WITH TRANSLATION 15968::9012. Phase 4-13 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9013. Response received WITH TRANSLATION 15969::9013. Phase 4-14 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9014. Response received WITH TRANSLATION 15970::9014. Phase 4-15 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9015. Response received WITH TRANSLATION 15971::9015. Phase 4-16 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9016. Response received WITH TRANSLATION 15972::9016. Phase 4-17 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9017. Response received WITH TRANSLATION 15973::9017. Phase 4-18 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9018. Response received WITH TRANSLATION 15974::9018. Phase 4-19 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9019. Response received WITH TRANSLATION 15975::9019. Phase 4-20 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9020. Response received WITH TRANSLATION 15976::9020. Phase 4-21 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9021. Response received WITH TRANSLATION 15977::9021. Phase 4-22 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9022. Response received WITH TRANSLATION 15978::9022. Phase 4-23 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9023. Response received WITH TRANSLATION 15979::9023. Phase 4-24 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9024. Response received WITH TRANSLATION 15980::9024. Phase 4-25 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9025. Response received WITH TRANSLATION 15981::9025. Phase 4-26 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9026. Response received WITH TRANSLATION 15982::9026. Phase 4-27 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9027. Response received WITH TRANSLATION 15983::9027. Phase 4-28 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9028. Response received WITH TRANSLATION 15984::9028. Phase 4-29 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9029. Response received WITH TRANSLATION 15985::9029. Phase 4-30 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9030. Response received WITH TRANSLATION 15986::9030. Phase 4-31 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9031. Response received WITH TRANSLATION 15987::9031. Phase 4-32 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9032. Response received WITH TRANSLATION 15988::9032. Phase 4-33 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9033. Response received WITH TRANSLATION 15995::9033. Phase 4-34 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9034. Response received WITH TRANSLATION 15999::9034. Phase 4-35 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9035. Response received WITH TRANSLATION 16001::9035. Phase 4-36 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9036. Response received WITH TRANSLATION 16002::9036. Phase 4-37 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9037. Response received WITH TRANSLATION 16003::9037. Phase 4-38 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9038. Response received WITH TRANSLATION 16004::9038. Phase 4-39 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9039. Response received WITH TRANSLATION 16005::9039. Phase 4-40 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9040. Response received WITH TRANSLATION 16006::9040. Phase 4-41 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9041. Response received WITH TRANSLATION 16007::9041. Phase 4-42 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9042. Response received WITH TRANSLATION 16008::9042. Phase 4-43 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9043. Response received WITH TRANSLATION 16009::9043. Phase 4-44 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9044. Response received WITH TRANSLATION 16010::9044. Phase 4-45 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9045. Response received WITH TRANSLATION 16011::9045. Phase 4-46 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9046. Response received WITH TRANSLATION 16012::9046. Phase 4-47 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9047. Response received WITH TRANSLATION 16013::9047. Phase 4-48 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9048. Response received WITH TRANSLATION 16014::9048. Phase 4-49 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/
: UDP RTP Port 9049. Response received WITH TRANSLATION 16015::9049. Phase 4-50 check passed with WARNINGS. Some functionality may be IMPAIRED. For more information, please visit https://www.3cx.com/blog/docs/firewall-checker/


Application exit code is 53

 

[flexxa]

Le porte 9xxx dovresti girarle verso il server 3CX, ma non servono per la comunicazione via gateway, quindi il ritardo non ha a che vedere con le porte.
Le chiamate via mobile e fissi le fai attraverso un unico gateway o hai un gateway GSM verso i cellulari e uno su linea tradizionale verso i fissi?

 

[eurylink.com]

Disabilita il server stun dalle impostazioni avanzate, riavvia tutti i servizi e riprova ad eseguire i test di chiamata. Se il server stun è attivo ma non riesce a comunicare con la rete, cioò si traduce in problemi di ritardo di questo tipo.

Saluti

 

[anonymous]

utilizzo un unico gateway nessun gateway gsm.
il gateway che utilizzo è un audiocodes MP114 4fxo

 

[anonymous]

ho provato a disabilitare il server stun come suggeritomi ed in effetti ora funziona molto meglio.
grazie. mi chiedevo , pero', se lasciando disabilitato il server stun riusciro' a far funzionare gli "interni" remoti o out of office.
grazie comunque ancora.

 

[eurylink.com]

Se hai IP Pubblico inserisci l'ip pubblico direttamente (trovi l'opzione subito sotto la disabilitazione dello stun).
In ogni caso hai sicuramente problemi di NAT dovuti ad una scorretta impostazione del router/firewall oppure semplicemente ad un router non adatto allo scopo.
Se hai IP dinamico ti consiglio vivamente di pensare all'acquisto di 1 ip statico col tuo attuale gestore.

 

[anonymous]

ho un ip pubblico.
ho disabilitato lo stun sul 3cx e riconfigurato i telefoni utilizzando comunque solo l'ip pubblico.(senza stun)
dalla consol del voip phone sembra tutto ok. il telefono risulta connesso.
se pero' cerco di telefonare fa uno squillo e poi dice forbidden...
mi sto demoralizzando.
non ho ben capito a cos aserve lo stun... e non trovo nella guida di 3cx che poche righe relativamente a questo argomento.
grazie ancora.