<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	
	>
<channel>
	<title>
	Comments on: Fixing the Asterisk Security Hole in TrixBox Systems	</title>
	<atom:link href="https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/feed/" rel="self" type="application/rss+xml" />
	<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/</link>
	<description>Ward Mundy&#039;s Technobabblelog</description>
	<lastBuildDate>Thu, 02 Jun 2011 13:57:24 +0000</lastBuildDate>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	
	<item>
		<title>
		By: Dan		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2617</link>

		<dc:creator><![CDATA[Dan]]></dc:creator>
		<pubDate>Mon, 16 Apr 2007 04:33:12 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2617</guid>

					<description><![CDATA[It looks like zaptel-1.2.16.tar.gz and asterisk-1.2.17.tar.gz are now the current version.

I didn&#039;t want to gamble with the new versions, so I used the old versions located in /releases

The full lines would be
wget http://ftp.digium.com/pub/telephony/zaptel/releases/zaptel-1.2.15.tar.gz
wget http://ftp.digium.com/pub/telephony/asterisk/releases/asterisk-1.2.16.tar.gz]]></description>
			<content:encoded><![CDATA[<p>It looks like zaptel-1.2.16.tar.gz and asterisk-1.2.17.tar.gz are now the current version.</p>
<p>I didn&#8217;t want to gamble with the new versions, so I used the old versions located in /releases</p>
<p>The full lines would be<br />
wget <a href="http://ftp.digium.com/pub/telephony/zaptel/releases/zaptel-1.2.15.tar.gz" rel="nofollow ugc">http://ftp.digium.com/pub/telephony/zaptel/releases/zaptel-1.2.15.tar.gz</a><br />
wget <a href="http://ftp.digium.com/pub/telephony/asterisk/releases/asterisk-1.2.16.tar.gz" rel="nofollow ugc">http://ftp.digium.com/pub/telephony/asterisk/releases/asterisk-1.2.16.tar.gz</a></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: David		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2580</link>

		<dc:creator><![CDATA[David]]></dc:creator>
		<pubDate>Fri, 23 Mar 2007 00:12:24 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2580</guid>

					<description><![CDATA[I am running AAH 2.7 which I upgraded a while back to asterisk 1.2.14, the zaptel at the time, etc.  The upgrade this time gave me an error during genzaptel_config.

Removing zaptel module: ERROR: Module zaptel is in use by zttranscode
                                                           [FAILED]

Plus some other nasties.
I found this link which showed a work around to get everything to unload properly.  
http://bugs.digium.com/view.php?id=7981
Looks like I&#039;m good to go - for the moment....]]></description>
			<content:encoded><![CDATA[<p>I am running AAH 2.7 which I upgraded a while back to asterisk 1.2.14, the zaptel at the time, etc.  The upgrade this time gave me an error during genzaptel_config.</p>
<p>Removing zaptel module: ERROR: Module zaptel is in use by zttranscode<br />
                                                           [FAILED]</p>
<p>Plus some other nasties.<br />
I found this link which showed a work around to get everything to unload properly.<br />
<a href="http://bugs.digium.com/view.php?id=7981" rel="nofollow ugc">http://bugs.digium.com/view.php?id=7981</a><br />
Looks like I&#8217;m good to go &#8211; for the moment&#8230;.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Ambro		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2578</link>

		<dc:creator><![CDATA[Ambro]]></dc:creator>
		<pubDate>Wed, 21 Mar 2007 15:24:03 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2578</guid>

					<description><![CDATA[Had the same issue as carol mentioned on my Nerd vittles asterisk running with vmware, on a Xeon....

When shutting down the asterisks server a load of Zaptel errors are reported...

However the upgrade of the actual asterisks has taken place and AsterisksInfo reports the updated 1.2.16... 

I just ignored the error as i dont use the zaptel module and its not affceted the SIP part of asterisks..

However i have noticed that since the upgrade there has been a few jitters in calls, when the incoming voice is interpreted intermittently. Taking in to account bandwidth is not a problem.. Any ideas on how to fix this?

Ambro]]></description>
			<content:encoded><![CDATA[<p>Had the same issue as carol mentioned on my Nerd vittles asterisk running with vmware, on a Xeon&#8230;.</p>
<p>When shutting down the asterisks server a load of Zaptel errors are reported&#8230;</p>
<p>However the upgrade of the actual asterisks has taken place and AsterisksInfo reports the updated 1.2.16&#8230; </p>
<p>I just ignored the error as i dont use the zaptel module and its not affceted the SIP part of asterisks..</p>
<p>However i have noticed that since the upgrade there has been a few jitters in calls, when the incoming voice is interpreted intermittently. Taking in to account bandwidth is not a problem.. Any ideas on how to fix this?</p>
<p>Ambro</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Robert		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2577</link>

		<dc:creator><![CDATA[Robert]]></dc:creator>
		<pubDate>Wed, 21 Mar 2007 13:32:10 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2577</guid>

					<description><![CDATA[My last comment about the app_speech_utils.so, issue was wrong. It still exists. Sorry!]]></description>
			<content:encoded><![CDATA[<p>My last comment about the app_speech_utils.so, issue was wrong. It still exists. Sorry!</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Robert		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2576</link>

		<dc:creator><![CDATA[Robert]]></dc:creator>
		<pubDate>Wed, 21 Mar 2007 13:08:32 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2576</guid>

					<description><![CDATA[Note. I did this update before per instructions. I needed to reapply it to a new machine instance. I am using the VMWare version. 

The files above have been upgraded at this point to zaptel-1.2.16.tar.gz and asterisk-1.2.16.tar.gz.

I installed without doing the app_speech_utils.so rename.(I had to in the original release). The problem no longer exists. It appears the prior issues have been resolved as I did not have to do any changes. So I guess I am noting that the issues have been fixed and the update goes without problems. At least for me. Thanks]]></description>
			<content:encoded><![CDATA[<p>Note. I did this update before per instructions. I needed to reapply it to a new machine instance. I am using the VMWare version. </p>
<p>The files above have been upgraded at this point to zaptel-1.2.16.tar.gz and asterisk-1.2.16.tar.gz.</p>
<p>I installed without doing the app_speech_utils.so rename.(I had to in the original release). The problem no longer exists. It appears the prior issues have been resolved as I did not have to do any changes. So I guess I am noting that the issues have been fixed and the update goes without problems. At least for me. Thanks</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: carol		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2564</link>

		<dc:creator><![CDATA[carol]]></dc:creator>
		<pubDate>Fri, 16 Mar 2007 16:18:18 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2564</guid>

					<description><![CDATA[On Xeon machine the procedure didn&#039;t work. The zaptel start fails with:

Loading zaptel framework:  [  OK  ]
Waiting for zap to come online: [  OK  ]
Loading zaptel hardware modules:
Loading tor2: [  OK  ]
Loading wct4xxp: [  OK  ]
Loading wct1xxp: [  OK  ]
Loading wcte11xp: [  OK  ]
Loading wcfxo: [  OK  ]
Loading wctdm: [  OK  ]
Loading ztdummy: [  OK  ]
Loading r4fxo: FATAL: Error inserting r4fxo (/lib/modules/2.6.9-34.0.2.ELsmp/extra/r4fxo.ko): Unknown symbol in module, or unknown parameter (see dmesg)
[FAILED]
Loading r1t1: FATAL: Error inserting r1t1 (/lib/modules/2.6.9-34.0.2.ELsmp/extra/r1t1.ko): Unknown symbol in module, or unknown parameter (see dmesg)
[FAILED]
Loading rxt1: FATAL: Error inserting rxt1 (/lib/modules/2.6.9-34.0.2.ELsmp/extra/rxt1.ko): Unknown symbol in module, or unknown parameter (see dmesg)
[FAILED]

Any idea how to fix this ?
Thanks]]></description>
			<content:encoded><![CDATA[<p>On Xeon machine the procedure didn&#8217;t work. The zaptel start fails with:</p>
<p>Loading zaptel framework:  [  OK  ]<br />
Waiting for zap to come online: [  OK  ]<br />
Loading zaptel hardware modules:<br />
Loading tor2: [  OK  ]<br />
Loading wct4xxp: [  OK  ]<br />
Loading wct1xxp: [  OK  ]<br />
Loading wcte11xp: [  OK  ]<br />
Loading wcfxo: [  OK  ]<br />
Loading wctdm: [  OK  ]<br />
Loading ztdummy: [  OK  ]<br />
Loading r4fxo: FATAL: Error inserting r4fxo (/lib/modules/2.6.9-34.0.2.ELsmp/extra/r4fxo.ko): Unknown symbol in module, or unknown parameter (see dmesg)<br />
[FAILED]<br />
Loading r1t1: FATAL: Error inserting r1t1 (/lib/modules/2.6.9-34.0.2.ELsmp/extra/r1t1.ko): Unknown symbol in module, or unknown parameter (see dmesg)<br />
[FAILED]<br />
Loading rxt1: FATAL: Error inserting rxt1 (/lib/modules/2.6.9-34.0.2.ELsmp/extra/rxt1.ko): Unknown symbol in module, or unknown parameter (see dmesg)<br />
[FAILED]</p>
<p>Any idea how to fix this ?<br />
Thanks</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Dave		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2548</link>

		<dc:creator><![CDATA[Dave]]></dc:creator>
		<pubDate>Sat, 10 Mar 2007 21:24:31 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2548</guid>

					<description><![CDATA[After upgrading per Ward&#039;s instructions, the VM-intro prompt before the beep is no longer there. When you dial *extension, you immediately get the beep and no &quot;Pls leave a msg after the tone. When done....&quot; msg. Any ideas?

I looked at the before and after upgrade logs and 
-- Playing &#039;vm-intro&#039; (language &#039;en&#039;)   **this line no longer exists after upgrade***
-- Playing &#039;beep&#039; (language &#039;en&#039;)

&lt;i&gt;[WM: You&#039;re correct. Another quirk. Here&#039;s a simple workaround. Open freePBX Setup with your web browser. Click &lt;b&gt;General Settings&lt;/b&gt;. The fifth option on the page is &lt;b&gt;Direct Dial to VoiceMail Message Type&lt;/b&gt;. Change the setting from Default to Unavailable. Save your change and click the Red Bar to reload Asterisk, and all should be well.]&lt;/i&gt;]]></description>
			<content:encoded><![CDATA[<p>After upgrading per Ward&#8217;s instructions, the VM-intro prompt before the beep is no longer there. When you dial *extension, you immediately get the beep and no "Pls leave a msg after the tone. When done&#8230;." msg. Any ideas?</p>
<p>I looked at the before and after upgrade logs and<br />
&#8212; Playing &#8216;vm-intro&#8217; (language &#8216;en&#8217;)   **this line no longer exists after upgrade***<br />
&#8212; Playing &#8216;beep&#8217; (language &#8216;en&#8217;)</p>
<p><i>[WM: You&#8217;re correct. Another quirk. Here&#8217;s a simple workaround. Open freePBX Setup with your web browser. Click <b>General Settings</b>. The fifth option on the page is <b>Direct Dial to VoiceMail Message Type</b>. Change the setting from Default to Unavailable. Save your change and click the Red Bar to reload Asterisk, and all should be well.]</i></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Steve Prior		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2547</link>

		<dc:creator><![CDATA[Steve Prior]]></dc:creator>
		<pubDate>Sat, 10 Mar 2007 15:00:47 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2547</guid>

					<description><![CDATA[app_speech_utils.so is part of the Lumenvox connector with Asterisk (guess how I found out).  To get my Lumenvox channel working again after following this update I had to follow the Asterisk instructions on the Lumenvox site (not the Trixbox specific ones) which included downloading a patch, applying it to the Asterisk source, and recompiling.  This got me quite nervous until I figured it out.]]></description>
			<content:encoded><![CDATA[<p>app_speech_utils.so is part of the Lumenvox connector with Asterisk (guess how I found out).  To get my Lumenvox channel working again after following this update I had to follow the Asterisk instructions on the Lumenvox site (not the Trixbox specific ones) which included downloading a patch, applying it to the Asterisk source, and recompiling.  This got me quite nervous until I figured it out.</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Jalapeno		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2546</link>

		<dc:creator><![CDATA[Jalapeno]]></dc:creator>
		<pubDate>Sat, 10 Mar 2007 05:21:34 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2546</guid>

					<description><![CDATA[I just tried this with AAH 2.7 (with Asterisk 1.2.5), and it seems to work. I had to do the spinlock.h fix and then follow the steps to install 1.2.16 and Zaptel 1.2.15. I did not have to yum install the kernel source because it was already there. Also my MOH stopped working too until I reloaded the settings. Thanks for the tips!]]></description>
			<content:encoded><![CDATA[<p>I just tried this with AAH 2.7 (with Asterisk 1.2.5), and it seems to work. I had to do the spinlock.h fix and then follow the steps to install 1.2.16 and Zaptel 1.2.15. I did not have to yum install the kernel source because it was already there. Also my MOH stopped working too until I reloaded the settings. Thanks for the tips!</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Lee Winsor		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2544</link>

		<dc:creator><![CDATA[Lee Winsor]]></dc:creator>
		<pubDate>Fri, 09 Mar 2007 20:24:00 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2544</guid>

					<description><![CDATA[Ward,

The instructions worked fine for my Trixbox1.2.3 vmware installation with one exception... Recompiling to Asterisk 1.2.16 broke my music on hold.

After several days of trying to find a way to fix it without any success, I did come up with a kludge that restores the operation of music on hold at least partially. It works, but the ring sound can be heard in the background while the music plays. I can live with that until someone comes up with a permanent fix. The fix is quite simple if you have a complete backup of your /usr/lib/asterisk/modules files prior to the asterisk recompile. 

You only need to restore one file.

cd  /usr/lib/asterisk/modules

mv  res_musiconhold.so      res_musiconhold.so.old    (just in case you need to restore it in the future)

cp  /bkpcopy/res_musiconhold.so       res_musiconhold.so   (copy your backup copy to the modules directory)

amportal restart    (your music on hold should now be working)

Note: I suspect your comments about file dates of the modules also applies here, so make sure the file date on the copied file is current and not the original 10/2006 date or asterisk may not load properly. 

-lee-

&lt;i&gt;[WM: Actually, I think the problem lies in the MusicOnHold setup with freePBX. You were correct. It wasn&#039;t working. Instead of replacing the module, try this first. Open  freePBX Setup with your web browser. Then click MusicOnHold, then click Default under the Add Music Category listing, then click the Enable Random Play button, and then click the Red Bar to reload Asterisk. I think that will fix your problem without injecting the ring sounds in the background. For some reason, the /etc/asterisk/musiconhold_additional.conf file got trashed, and the steps I&#039;ve outlined will restore it.]&lt;/i&gt;
]]></description>
			<content:encoded><![CDATA[<p>Ward,</p>
<p>The instructions worked fine for my Trixbox1.2.3 vmware installation with one exception&#8230; Recompiling to Asterisk 1.2.16 broke my music on hold.</p>
<p>After several days of trying to find a way to fix it without any success, I did come up with a kludge that restores the operation of music on hold at least partially. It works, but the ring sound can be heard in the background while the music plays. I can live with that until someone comes up with a permanent fix. The fix is quite simple if you have a complete backup of your /usr/lib/asterisk/modules files prior to the asterisk recompile. </p>
<p>You only need to restore one file.</p>
<p>cd  /usr/lib/asterisk/modules</p>
<p>mv  res_musiconhold.so      res_musiconhold.so.old    (just in case you need to restore it in the future)</p>
<p>cp  /bkpcopy/res_musiconhold.so       res_musiconhold.so   (copy your backup copy to the modules directory)</p>
<p>amportal restart    (your music on hold should now be working)</p>
<p>Note: I suspect your comments about file dates of the modules also applies here, so make sure the file date on the copied file is current and not the original 10/2006 date or asterisk may not load properly. </p>
<p>-lee-</p>
<p><i>[WM: Actually, I think the problem lies in the MusicOnHold setup with freePBX. You were correct. It wasn&#8217;t working. Instead of replacing the module, try this first. Open  freePBX Setup with your web browser. Then click MusicOnHold, then click Default under the Add Music Category listing, then click the Enable Random Play button, and then click the Red Bar to reload Asterisk. I think that will fix your problem without injecting the ring sounds in the background. For some reason, the /etc/asterisk/musiconhold_additional.conf file got trashed, and the steps I&#8217;ve outlined will restore it.]</i></p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Ken		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2541</link>

		<dc:creator><![CDATA[Ken]]></dc:creator>
		<pubDate>Thu, 08 Mar 2007 18:35:17 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2541</guid>

					<description><![CDATA[Ward,

Terrific instructions as usual! The only additional thing I had to do was comment out &quot;exclude=kernel*&quot; my CentOS-Base.repo and CentOS-Media.repo files to allow the new kernel to show up. (I wasn&#039;t sure which file would do it so I just commented out both of them)

Thanks!

Ken]]></description>
			<content:encoded><![CDATA[<p>Ward,</p>
<p>Terrific instructions as usual! The only additional thing I had to do was comment out "exclude=kernel*" my CentOS-Base.repo and CentOS-Media.repo files to allow the new kernel to show up. (I wasn&#8217;t sure which file would do it so I just commented out both of them)</p>
<p>Thanks!</p>
<p>Ken</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: Tom King		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2539</link>

		<dc:creator><![CDATA[Tom King]]></dc:creator>
		<pubDate>Thu, 08 Mar 2007 04:08:31 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2539</guid>

					<description><![CDATA[Hi Ward

Thanks for your article. I have created an all in one install script based on your article and it is available at

http://www.script-trix.us/updatesource.htm

It follows your suggestions closely although I have not had a chance to test it on a 1.2.3 machine. It does work quite well on a 2.0 box and I suspect it will do the same on a 1.2.3 box. Thanks for all of your hard work and the plug above!

Tom]]></description>
			<content:encoded><![CDATA[<p>Hi Ward</p>
<p>Thanks for your article. I have created an all in one install script based on your article and it is available at</p>
<p><a href="http://www.script-trix.us/updatesource.htm" rel="nofollow ugc">http://www.script-trix.us/updatesource.htm</a></p>
<p>It follows your suggestions closely although I have not had a chance to test it on a 1.2.3 machine. It does work quite well on a 2.0 box and I suspect it will do the same on a 1.2.3 box. Thanks for all of your hard work and the plug above!</p>
<p>Tom</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: tim		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2535</link>

		<dc:creator><![CDATA[tim]]></dc:creator>
		<pubDate>Wed, 07 Mar 2007 07:13:01 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2535</guid>

					<description><![CDATA[the instructions work fine for updating trixbox 2.0, this was on my list to do and i&#039;m glad i was able to knock it out tonight. thanks!]]></description>
			<content:encoded><![CDATA[<p>the instructions work fine for updating trixbox 2.0, this was on my list to do and i&#8217;m glad i was able to knock it out tonight. thanks!</p>
]]></content:encoded>
		
			</item>
		<item>
		<title>
		By: David		</title>
		<link>https://nerdvittles.com/fixing-the-asterisk-security-hole-in-trixbox-123/comment-page-1/#comment-2534</link>

		<dc:creator><![CDATA[David]]></dc:creator>
		<pubDate>Tue, 06 Mar 2007 22:41:57 +0000</pubDate>
		<guid isPermaLink="false">http://nerdvittles.com/?p=171#comment-2534</guid>

					<description><![CDATA[In an older post by bubba we used the following for zaptel based on the kernel.

make linux26 
make install 
make config]]></description>
			<content:encoded><![CDATA[<p>In an older post by bubba we used the following for zaptel based on the kernel.</p>
<p>make linux26<br />
make install<br />
make config</p>
]]></content:encoded>
		
			</item>
	</channel>
</rss>
