Best security Option's

4 posts / 0 new
Last post
jimgb17
jimgb17's picture
Best security Option's

Hi all
i have now got my freepbx/asterisk working perfect on my cheap £6 Centos 6 vps

However i now need to setup security

Whats the best options i am already getting hack attempts in my logs!

How to i enable iptabes and install fail2ban is this the best option?

jimgb17
jimgb17's picture
[2013-09-25 20:21:19] VERBOSE

[2013-09-25 20:21:19] VERBOSE[15281][C-0000008a] pbx.c: -- Executing [s@from-sip-external:6] Log("SIP/50.97.253.182-00000094", "WARNING,"Rejecting unknown SIP connection from 192.187.115.90"") in new stack
[2013-09-25 20:21:19] VERBOSE[15281][C-0000008a] pbx.c: -- Executing [s@from-sip-external:6] Log("SIP/50.97.253.182-00000094", "WARNING,"Rejecting unknown SIP connection from 192.187.115.90"") in new stack
[2013-09-25 20:21:19] WARNING[15281][C-0000008a] Ext. s: "Rejecting unknown SIP connection from 192.187.115.90"
[2013-09-25 20:21:19] WARNING[15281][C-0000008a] Ext. s: "Rejecting unknown SIP connection from 192.187.115.90"

Is this hack Attempts!

dicko
dicko's picture
Yes

Yes

whois 192.187.115.90
[Querying whois.arin.net]
[whois.arin.net]

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

#
# Query terms are ambiguous. The query is assumed to be:
# "n 192.187.115.90"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.187.115.90?showDetails=true&showARIN=false&ext=netref2
#

DataShack, LC DSV4-7 (NET-192-187-96-0-1) 192.187.96.0 - 192.187.127.255
Mahmoud Aldadah DS-115-90-94 (NET-192-187-115-88-1) 192.187.115.88 - 192.187.115.95

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html

dicko
dicko's picture
If you are using asterisk 11

If you are using asterisk 11 then

http://sourceforge.net/p/raspbx/discussion/tutorials/thread/6288a838/

should work for you.