Connection failed - Timeout

When you create users in your Ringotel portal, you may see the following error after a few seconds of trying:

We could not connect to server xxxx.xxxxxxxxx:5060. Please check firewall settings and try again. You may need to whitelist an IP address that corresponds to the organization's region where you are creating this user account.

This error message means that our server did not receive any response to the REGISTER request from a PBX server that you specified in the Ringotel connection settings.

To resolve this, ensure that Ringotel IPs are not blocked in your Firewall / secure settings and are included in the exceptions list. The Ringotel IPs to exclude depend on the region where you create organisations. You can find the full list of Ringotel IPs here - Configure Firewall to work with Ringotel.

FusionPBX Fail2Ban

When connecting to FusionPBX, if you have Fail2Ban installed and enabled on the same server, you may need to check if Ringotel IPs were not put in the Fail2Ban “jails”.

You can view the IP addresses blocked by Fail2ban with the following command:

iptables -L -n

Then, check "sip-auth-fail" and "sip-auth-ip" chains in your firewall rules list. If you find Ringotel IPs in these chains you will need to delete them from there. If you have only one rule in the chain(s), you can flush the "sip-auth-fail" and/or "sip-auth-ip" chains with these commands "iptables -F sip-auth-fail" and/or "iptables -F sip-auth-ip".

In addition, exclude an Ringotel IPs so that they aren't blocked by any filters. For this, edit the jails.conf file:

nano /etc/fail2ban/jail.conf

Find ignoreip and add the Ringotel IPs that need to be white listed. Use a space as a delimitter between each one. Restart fail2ban to apply the changes to the ignoreip list. For example:

ignoreip = 54.144.152.6, 3.229.25.209

Please refer to the official FusionPBX and Fail2Ban documentation for further details.