Post Tagged with: "security"

The Ultimate Linux Sandbox in the Cloud for Less Than a $35 Raspberry Pi 2

The Ultimate Linux Sandbox in the Cloud for Less Than a $35 Raspberry Pi 2

Monday, January 25, 2016

Comments are Disabled

Every few years we like to drop back and take a fresh look at the best way to get started with Linux. For those coming from the Windows World, it can be a painful process. Learning with a Cloud-based server can be especially dangerous because of the security risks. And then there’s the cost factor. Not everyone has several hundred dollars to buy hardware and, frankly, learning about Linux on a $35 Raspberry Pi can drive most newbies to drink.… Read More ›

Introducing the FUD-Free Firewall for FreePBX Distro and AsteriskNOW

Introducing the FUD-Free Firewall for FreePBX Distro and AsteriskNOW

Monday, August 10, 2015

Comments are Disabled

View image | gettyimages.com After frequent complaints from our FreePBX® users, we introduced a firewall application for the PBX in a Flash™ and Incredible PBX™ platforms that protected FreePBX resources. That was over 5 years ago. The product became Travelin’ Man™ 3, an IPtables-based WhiteList that totally eliminated access to your Asterisk® server unless a WhiteList entry had been authorized by the administrator. The application was further embellished over the years to facilitate access by remote users. First, we introduced… Read More ›

Firewalls 101: Why Every Asterisk Server Should Have a Functioning Firewall

Firewalls 101: Why Every Asterisk Server Should Have a Functioning Firewall

Monday, August 3, 2015

1 comment

View image | gettyimages.com Part of our fundamental disagreement with the FreePBX® design can be summed up in one word: FIREWALL or the lack of a functioning firewall in the FreePBX Distro and in the functionally identical Digium product, AsteriskNOW®.1 Most of the other design choices including the controversial, non-GPL compliant Module Signature Checking mechanism are touted as failsafe ways to detect altered systems even though changes in FreePBX MySQL tables and Asterisk config files can be modified easily without… Read More ›

Firewalls and Internet Security: Separating FUD and Fiction in the VoIP World

Firewalls and Internet Security: Separating FUD and Fiction in the VoIP World

Thursday, April 23, 2015

Comments are Disabled

Some of us have spent years developing secure VoIP solutions for Asterisk® that protect your phone bill while bringing Cloud-based solutions within reach of virtually anyone. So it’s particularly disappointing when a hardware manufacturer spreads fear, uncertainty, and doubt in order to peddle their hardware. In this case, it happens to be Session Border Controllers (SBCs). We want you to watch this latest "infomercial" for yourself: https://youtu.be/Bp_7m64k_ko To hear Sangoma tell it, every VoIP server protected by merely a firewall… Read More ›

Midnight Madness: Introducing Incredible PBX 12 with Asterisk 12 and FreePBX

Midnight Madness: Introducing Incredible PBX 12 with Asterisk 12 and FreePBX

Monday, December 1, 2014

4 comments

[iframe-popup id="4″] The number "12″ always has held mystical prominence in our culture and so it is with Asterisk®. Just over 12 months ago, Digium first introduced Asterisk 12 at AstriCon in Atlanta and heralded a major change in the direction of the product. It was more than a wholesale revamping of the Asterisk feature set. There was a revolutionary new development methodology thanks to the untiring efforts of Matt Jordan and his incredibly talented development team. Unlike Asterisk releases… Read More ›

A Firsthand Look at Disaster Recovery: Tethering and IAX with Asterisk

A Firsthand Look at Disaster Recovery: Tethering and IAX with Asterisk

Monday, October 20, 2014

3 comments

One of the exciting challenges of building a swimming pool is knowing that it’s just a matter of time until your Internet connection dies. As you might imagine, swimming pools are major construction and involve a lot of digging. And digging usually means some oops moments when cables get cut. In our case, we had watched the folks digging the trenches for all of the pool plumbing to be sure they didn’t accidentally whack one of three coax cables coming… Read More ›

Zero Day Vulnerability Protection and More: Introducing Cover Your Asterisk

Zero Day Vulnerability Protection and More: Introducing Cover Your Asterisk

Monday, October 6, 2014

Comments are Disabled

It’s been a difficult couple of weeks for the Linux® and Asterisk® communities with the back-to-back disclosures of the BASH Shellshock bug and then the FreePBX® Asterisk Recording Interface (ARI) bug a few days later. Both of these vulnerabilities have been circulating in the wild for years. We won’t repeat Wikipedia’s Zero Day Attack analysis other than to note that what makes these particular bugs so scary is not only the fact that both went undetected and unpatched for years… Read More ›

Hold On to Your Wallet: Another Huge VoIP Phone Bill May Be Lurking

Hold On to Your Wallet: Another Huge VoIP Phone Bill May Be Lurking

Wednesday, October 1, 2014

1 comment

View image | gettyimages.com We interrupt our regularly scheduled content to bring you an urgent security alert. A couple days ago, a FreePBX® user reported unusual call activity. He traced the calls to a System Admin Dashboard module that was linked back to an IP address in the Netherlands. When the problem was reported, the FreePBX Community Manager quite accurately noted that it wasn’t FreePBX code. When a second user reported the exact same exploit, alarm bells apparently went off.… Read More ›