TIPS Whitelisting ports

[vchohan]

Hi Team, we have new incredible PBX server 2020 on the cloud. I guess because of firewall, I am not able to register extensions. Is there any way to whitelist ports and IP address? For example, I have already used .add-ip script to white list public and private IP address, due to which do SSH and access UI. But I think it will not whitelist ports. As a result, I am not able to register extension (timeout while registering) and I guess later there will issue with audio as well.

 

[krzykat]

Do yourself a favor ... do public-2020 script. Then you can be locked down by FQDN and eliminate a lot of these access issues.

 

[ostridge]

I have already used .add-ip script

My ipbx2020 is local not cloud
My /root/add-ip script includes the following code

service[0]="ALL Services"
service[1]="SIP (UDP)"
service[2]="SIP (TCP)"
service[3]="IAX"
service[4]="Web"
service[5]="WebMin"
service[6]="FTP"
service[7]="t*f*t*p"
service[8]="SSH"
service[9]="FOP"

entry[0]="/usr/sbin/iptables -A INPUT -s $iptest -j ACCEPT"
entry[1]="/usr/sbin/iptables -A INPUT -p udp -m udp -s $iptest --dport 5060:5069 -j ACCEPT"
entry[2]="/usr/sbin/iptables -A INPUT -p tcp -m tcp -s $iptest --dport 5060:5069 -j ACCEPT"
entry[3]="/usr/sbin/iptables -A INPUT -p udp -m udp -s $iptest --dport 4569 -j ACCEPT"
entry[4]="/usr/sbin/iptables -A INPUT -p tcp -m multiport -s $iptest --dports 80,9080 -j ACCEPT"
entry[5]="/usr/sbin/iptables -A INPUT -p tcp -m tcp -s $iptest --dport 9001 -j ACCEPT"
entry[6]="/usr/sbin/iptables -A INPUT -p tcp -m tcp -s $iptest --dport 21 -j ACCEPT"
entry[7]="/usr/sbin/iptables -A INPUT -p udp -m udp -s $iptest --dport 69 -j ACCEPT"
entry[8]="/usr/sbin/iptables -A INPUT -p tcp -m multiport -s $iptest --dports 22,9022 -j ACCEPT"
entry[9]="/usr/sbin/iptables -A INPUT -p tcp -m tcp -s $iptest --dport 4445 -j ACCEPT"

So when you tell the script which 'service' you are using the IP for, then you are whitelistng the appropriate ports; but only for the services you list in the numerical input.

 

[Eliad]

when IncrediblePBX is in the cloud the issue you describe is related to your local router/Firewall. What Firewall do you use at the phone location?