3CX app connection problem outside my network. [Solved]

[Silver77]

I3CX app connection problem outside my network.
i need help configurating my 3CX app.
my problemm is, when my phone is conncted to my network, it works fine;but when i connect my phone to another network, my 3cx application doesn't work.


for the wan I use a public static ip address
and create a virtual ip and redirect it to opt2 using my other pubblic address
i know that it works because if i ping the public ip, it responds
if i disable the opt2, it doesnt respond.

then i just create a dmz on opt2 (192.168.124.254)
my 3CX is 192.168.124.100

this the opt2 rules

protcol      souse      port   dest   port   gw   
IPv4 *      OPT2 net   *   *   *   *            
IPv4 *      OPT2 net   *   *   53 (DNS)         
IPv4 *      OPT2 net   *   OPT2 address   *               
IPv4 *      *      *   OPT2 net   *   

these are my port forwarding rules
in these rules 3CX is an Alias

WAN   UDP   *   *   This Firewall   5090   3CX     5090   3CX 5090 UDP      
WAN   UDP   *   *   This Firewall   9000 - 10999   3CX     9000 - 10999   3CX RTP      
WAN   UDP   *   *   This Firewall   9000 - 10999   3CX     9000 - 10999   3CX RTP      
WAN   TCP   *   *   This Firewall   5090   3CX     5090   3CX 5090 TCP      
WAN   TCP   *   *   This Firewall   5065   3CX     5065   3CX SIP      
WAN   UDP   *   *   This Firewall   5065   3CX     5065   3CX SIP UDP      
WAN   TCP   *   *   This Firewall   5001   3CX     5001   3CX HTTPS      
WAN   TCP   *   *   This Firewall   443   3CX     443   3CX HTTPS


then all works fine, only the 5001 and the 443 don't work
all the other ports work fine

i just create an outbond rule
with this, when i do a 3cx network test, all the udp test pass well..


Interface   Source   Source Port   Destination   Destination Port   NAT Address   NAT Port   Static Port   Description   
      WAN   3CX     *   *   *   Interface address   *   YES

There's no problem inside my network with my 3cx app, the problem is that the app doesn't connect outside my network.

I've been working on this for 2 days and I don't understand what is the problem. Help me please.

[banym]

You will not only need rules on WAN, you will need NAT Rules, too.

Do you have setup NAT Rules?

[Silver77]

sorry...

what kind of rules?

[Silver77]

I understand this is a port forwarding problem because 3CX test works but if I try to do a port test via https://www.yougetsignal.com/tools it says that it is closed. I don't have a lot of experience with port forwarding on dmz. Do you have any idea?


Inviato dal mio iPhone utilizzando Tapatalk

[banym]

You defined incoming Rules but maybe not NAT rules:

https://docs.opnsense.org/manual/nat.html

To do port forwarding you need NAT rules AND incoming rules.
If you create incoming NAT rules you can generate the incoming rules automatically.

[Silver77]

I do nat portforwarding rules, you can see in my first post.
The problem is port not pass to dmz...

[banym]

Sorry my fault.

Port 443 can make problems if you're using it for your management. Have you changed the management port to a different one?

Please make some screenshots of your rules and NAT rules and post them.

[Silver77]

Yes i change the default from 443 to 40443.
The problem is port not open for DMZ

[Silver77]

sorry...

what kind of rules?

[Silver77]

this is my configuration pw

[Silver77]

this the opt2 roles

[Silver77]

this the wan roles

[Silver77]

the outbond role...
whit this role the 3cx port test work well

i know something is wrong...
thanks for help me

[Silver77]

why do users not reply in this forum? more than 100 views. i need you

[Silver77]

doing tests I receive calls via the app, but I cannot answer. but the app does not register.