Comments on: The Perfect VoIP Sandbox or Is It? Meet Digital Ocean Cloud Hosting

By: Wilfried

Wilfried — Thu, 01 May 2014 13:57:17 +0000

I hope infuture versions of incredible pbx will be postfixmore integrate as mail and smtp server. For me exist more easy to handle instructions than for sendmail. Additional spamassasin and clamav seems to be nice. Thanks a lot for this great work

By: Chrisnetika

Chrisnetika — Sun, 27 Apr 2014 05:58:48 +0000

Ward Mundy, I use similiar type hosting called Linode and it is really good.There speed is fast and performance is rock solid.They are using ssd and have Grade A customer support http://www.linode.com.
I have sucessfully installed PIAF and IncrediblePBX on my server but since it is xen hypervisor had to do easy simple extra step.I had to yum install native centos kernal then make /boot/grub/menu.lst .I pretty much followed this guide https://library.linode.com/custom-instances/pv-grub-howto#sph_centos-6
Then I put my server to pv-grub and then download PIAF install script and it worked like a charm.This is very reliable hosting and their prices are good.I use 20$ and no performance slowdowns.Maybe take a look at that.

By: Wang

Wang — Sat, 26 Apr 2014 18:23:59 +0000

I wish you could provide a version of iptables rules that is for boxes that sit there with no firewall that would have all the fail2ban configuration as well as, TCP 22 and 80, UDP 5060 and 10000-20000 only. That way we could use this config as a production.

[WM: Have you tried the latest release? ]

By: Lee

Lee — Thu, 17 Apr 2014 18:35:43 +0000

One caveat worth mentioning is the test-drive being described in the article breaks the PIAF security model of ‘zero foot-print’, since it can’t sit behind a hardware firewall, (which needs to be updated asap because of heartbleed.). Long-term, clearly, the thing needs to be behind a hardware firewall as you already know.

[WM: As noted in the article, this was intended as a sandbox platform, i.e. not for production use. Travelin’ Man 3 is available as part of the Incredible PBX 11 install to secure the IPtables firewall. In addition, Fail2Ban is installed by default. The Digital Ocean platform also provides ample tools to further lock down SSH access if desired. And the HeartBleed bug has been addressed. When the install finishes, you’ll have openssl-1.0.1e-16.el6_5.7.i686 which is the RedHat-patched version of the OpenSSL RPM. ]