3cx hinter UTM

Question

Hallo zusammen, 
 hat schon jemand erfolgreich eine 3cx hinter einer UTM am Start? Ich verzweifel da gerade. Ich hab ein Additional Address Objekt angelegt mit einer freien, &ouml;ffentlichen IP aus unserem &ouml;ffentlichen Subnetz. Des Weiteren hab ich Adressobjekte angelegt f&uuml;r die interne und externe IP meiner 3cx. VOIP ist aus auf der UTM. Per Masquerading gebe ich der 3cx beim ausgehenden Traffic die WAN-IP die auch eingehend genutzt wird. Eingehend habe ich per DNAT die Ports reingegeben. Dennoch bekomme ich immer wieder den Fehler (testing port 5060... full cone test failed.

Argo · Answer

Hi geordi, 
 a couple of questions; 
 1. from the tests in your original question (that are performed from an internet location) these show you are unable to get to port 5060... 
 2. is 3cx_WAN the same Public IP as SDSL 10Mbit? 
 3. SNAT would be configured as if the traffic were coming from the 3cx server (a good way to test if that is possible is to find the Public IP Address that it thinks it is 'Masquerading' as. 
 this mean you would change the 'Source Network Address Translation' (S.N.A.T.) address 
 e.g. if the 3cx server is 192.168.1.100 an SNAT rule would change this address to a Public IP Address (as Private IP Addresses are either ignored or dropped). 
 SNAT/DNAT have issues if there is a previous rule which encompasses the 3cx server - the 3cx server will use that rule as it comes before the rules you have created - Rule Order is very important. 
 I hope this helps, SNAT is always a mind-bender 
 also I looked at the following 2 pages from 3cx; 
 https://www.3cx.com/docs/manual/firewall-router-configuration/ 
 https://www.3cx.com/docs/troubleshooting-firewall-checker/

3cx hinter UTM

Submitted a Tech Support Case lately from the Support Portal?