Your ads will be inserted here by

Easy Plugin for AdSense.

Please go to the plugin admin page to
Paste your ad code OR
Suppress this ad slot.

Securing Asterisk Server (Simple tips)

Change Admin: User: Done

Use Monitoring such as Ossec for any suspecious alerts.

Change root password if its simple

vi /var/www/html/recordings/includes/main.conf
Console= disabled

Your ads will be inserted here by

Easy Plugin for AdSense.

Please go to the plugin admin page to
Paste your ad code OR
Suppress this ad slot.

Extension passwords to be complicated (Auto generated)

Iptables

-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

#Open for Web UI,SSH and SSL
-A INPUT -p tcp -m multiport --dport 80,443,22 -j ACCEPT

# IP to allow SIP Port
-A INPUT -p udp -m udp -s x.x.x.x/32 --dport 5060 -j ACCEPT

# DDI Providers IP All range
-A INPUT -p udp -m udp -s xx.xx.Xxx.x/25 --dport 5060 -j ACCEPT

# RTP PORT as mentioned in rtp conf file
-A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT


#Block Everything Else
-A INPUT -j REJECT --reject-with icmp-host-prohibited

From Freepbx web or conf

For each Extension:

deny = 0.0.0.0/0.0.0.0 (All)
Permit = XX.XX.XX.XX/255.255.255.255 (Only My IP)