topic Business Smart Hub 2 Port forwarding problem in Broadband https://business.forums.bt.com/t5/Broadband/Business-Smart-Hub-2-Port-forwarding-problem/m-p/91253#M17289 <P>I've accepted that there probably isn't a "solution" to this but are the Firmware developers even aware that it is an issue?</P><P>Running a 3CX server behind a Smart hub 2 currently requires a DMZ configuration. Strictly speaking to pass the server's tests you'll also need to turn the firewall off but after getting a good test result it can be turned back on again.</P><P>A port forwarding configuration <U>almost</U> works except that ports are being remapped, they are not properly transparent. Specifically I believe outbound connections are being handled by NAPT (NAT)&nbsp; not by the forwarding rules. The difference is subtle but apparently matters for SIP.</P><P>&nbsp;</P><P>Reasons for wanting to use forwarding rules and not DMZ:</P><P>I don't want to expose other vulnerabilities that might exist on the server such as the RDP port.</P><P>There can only be one DMZ device.</P><P>It just seems an extreme solution.</P> Fri, 05 Apr 2024 09:19:16 GMT obroad 2024-04-05T09:19:16Z Business Smart Hub 2 Port forwarding problem https://business.forums.bt.com/t5/Broadband/Business-Smart-Hub-2-Port-forwarding-problem/m-p/91253#M17289 <P>I've accepted that there probably isn't a "solution" to this but are the Firmware developers even aware that it is an issue?</P><P>Running a 3CX server behind a Smart hub 2 currently requires a DMZ configuration. Strictly speaking to pass the server's tests you'll also need to turn the firewall off but after getting a good test result it can be turned back on again.</P><P>A port forwarding configuration <U>almost</U> works except that ports are being remapped, they are not properly transparent. Specifically I believe outbound connections are being handled by NAPT (NAT)&nbsp; not by the forwarding rules. The difference is subtle but apparently matters for SIP.</P><P>&nbsp;</P><P>Reasons for wanting to use forwarding rules and not DMZ:</P><P>I don't want to expose other vulnerabilities that might exist on the server such as the RDP port.</P><P>There can only be one DMZ device.</P><P>It just seems an extreme solution.</P> Fri, 05 Apr 2024 09:19:16 GMT https://business.forums.bt.com/t5/Broadband/Business-Smart-Hub-2-Port-forwarding-problem/m-p/91253#M17289 obroad 2024-04-05T09:19:16Z