Post Tagged with: "security"

Introducing the FUD-Free Firewall for FreePBX Distro and AsteriskNOW

Introducing the FUD-Free Firewall for FreePBX Distro and AsteriskNOW

Monday, August 10, 2015

Comments are Disabled

View image | gettyimages.com After frequent complaints from our FreePBX® users, we introduced a firewall application for the PBX in a Flash™ and Incredible PBX™ platforms that protected FreePBX resources. That was over 5 years ago. The product became Travelin’ Man™ 3, an IPtables-based WhiteList that totally eliminated access to your Asterisk® server unless a WhiteList entry had been authorized by the administrator. The application was further embellished over the years to facilitate access by remote users. First, we introduced… Read More ›

Firewalls 101: Why Every Asterisk Server Should Have a Functioning Firewall

Firewalls 101: Why Every Asterisk Server Should Have a Functioning Firewall

Monday, August 3, 2015

1 comment

View image | gettyimages.com Part of our fundamental disagreement with the FreePBX® design can be summed up in one word: FIREWALL or the lack of a functioning firewall in the FreePBX Distro and in the functionally identical Digium product, AsteriskNOW®.1 Most of the other design choices including the controversial, non-GPL compliant Module Signature Checking mechanism are touted as failsafe ways to detect altered systems even though changes in FreePBX MySQL tables and Asterisk config files can be modified easily without… Read More ›

Firewalls and Internet Security: Separating FUD and Fiction in the VoIP World

Firewalls and Internet Security: Separating FUD and Fiction in the VoIP World

Thursday, April 23, 2015

Comments are Disabled

Some of us have spent years developing secure VoIP solutions for Asterisk® that protect your phone bill while bringing Cloud-based solutions within reach of virtually anyone. So it’s particularly disappointing when a hardware manufacturer spreads fear, uncertainty, and doubt in order to peddle their hardware. In this case, it happens to be Session Border Controllers (SBCs). We want you to watch this latest “infomercial” for yourself: https://youtu.be/Bp_7m64k_ko To hear Sangoma tell it, every VoIP server protected by merely a firewall… Read More ›

Midnight Madness: Introducing Incredible PBX 12 with Asterisk 12 and FreePBX

Midnight Madness: Introducing Incredible PBX 12 with Asterisk 12 and FreePBX

Monday, December 1, 2014

4 comments

#83329085 / gettyimages.com The number “12” always has held mystical prominence in our culture and so it is with Asterisk®. Just over 12 months ago, Digium first introduced Asterisk 12 at AstriCon in Atlanta and heralded a major change in the direction of the product. It was more than a wholesale revamping of the Asterisk feature set. There was a revolutionary new development methodology thanks to the untiring efforts of Matt Jordan and his incredibly talented development team. Unlike Asterisk… Read More ›

A Firsthand Look at Disaster Recovery: Tethering and IAX  with Asterisk

A Firsthand Look at Disaster Recovery: Tethering and IAX with Asterisk

Monday, October 20, 2014

3 comments

One of the exciting challenges of building a swimming pool is knowing that it’s just a matter of time until your Internet connection dies. As you might imagine, swimming pools are major construction and involve a lot of digging. And digging usually means some oops moments when cables get cut. In our case, we had watched the folks digging the trenches for all of the pool plumbing to be sure they didn’t accidentally whack one of three coax cables coming… Read More ›

Zero Day Vulnerability Protection and More: Introducing Cover Your Asterisk

Zero Day Vulnerability Protection and More: Introducing Cover Your Asterisk

Monday, October 6, 2014

Comments are Disabled

It’s been a difficult couple of weeks for the Linux® and Asterisk® communities with the back-to-back disclosures of the BASH Shellshock bug and then the FreePBX® Asterisk Recording Interface (ARI) bug a few days later. Both of these vulnerabilities have been circulating in the wild for years. We won’t repeat Wikipedia’s Zero Day Attack analysis other than to note that what makes these particular bugs so scary is not only the fact that both went undetected and unpatched for years… Read More ›

Hold On to Your Wallet: Another Huge VoIP Phone Bill May Be Lurking

Hold On to Your Wallet: Another Huge VoIP Phone Bill May Be Lurking

Wednesday, October 1, 2014

1 comment

View image | gettyimages.com We interrupt our regularly scheduled content to bring you an urgent security alert. A couple days ago, a FreePBX® user reported unusual call activity. He traced the calls to a System Admin Dashboard module that was linked back to an IP address in the Netherlands. When the problem was reported, the FreePBX Community Manager quite accurately noted that it wasn’t FreePBX code. When a second user reported the exact same exploit, alarm bells apparently went off.… Read More ›

The 5-Minute PBX: A Fresh Look at Oracle’s VirtualBox with Incredible PBX

The 5-Minute PBX: A Fresh Look at Oracle’s VirtualBox with Incredible PBX

Sunday, September 21, 2014

4 comments

Today we’re paying another visit to our favorite virtual machine platform and introducing four new VoIP images that let you compare features and performance of Asterisk® 11 running atop Ubuntu® 14 or Scientific Linux™ 6.5 with FreePBX® 2.11 or the just-released version 12 release candidate. Think of Incredible PBX™ as the VoIP glue stick that assembles all the necessary VoIP components and holds them together seamlessly. As with all Incredible PBX builds, you also get the full complement of goodies… Read More ›