iTalkBB, 3CX and whitelisting

[Smoothrunnings]

Does anyone use iTalkBB and has a family member in China who call them?

I block all incoming except for the US and CA on my IPv4 and IPv6. iTalkBB is Canadian company that provides VoIP and TV services, they also provide a service on their VoIP that gives a family member in China a local phone number for them to call that is linked to your iTalkBB local number in Canada.

I am also having problems with 3CX which I use for work. Calls are going silent, I can't hear the caller but they can hear me. Leads me to believe possibly something to do with pfBlocker.

I am using pfBlocker 3.0 (latest version now), and wondered if its possible to whitelist these services (3CX and iTalkBB) and if anyone has done it?

Thanks,

[rtw915]

I'm not an expert but I used 3cx with pfsense for 3 years at my previous job.

I had the same issue with no audio on one side on two different occasions with 3cx. 1. was when I did not have the full cone NAT configured properly. I don't have access to 3cx anymore but I remember there was a network troubleshooting utility. Until I fixed the NAT problem it would not return successful. This might help https://www.3cx.com/docs/pfsense-firewall/

The other time I had a similar issue was because the user vpn was not routing and using NAT instead. After I changed the OpenVPN config to routing and added the VPN static routes in pfsense pointing to the VPN server it worked.

I also remember there were instances where we would receive calls from external entities that used VOIP and those connections did not need to go through our SIP provider. I realized this because I had originally opened the SIP ports with the src address of the SIP provider, and most calls would work except from some specific vendors. After opening up the the SIP ports from "any" those vendors started working as well.

As far as iTalkBB, I have never used it, but pfBlockerNG just uses regular firewall rules. You can turn on logging and see if something is a miss. Or even faster test just temporarily disable the firewall rules and see if stuff starts working.

I have noticed the Geo IP is not 100%, so maybe you are running into an issue there. It was recommended somewhere that you don't block the world. I prefer to do the reverse which is just to allow specific countries.

Hope this helps!