Comments on: Welcome to IP Country: A New Layer of Asterisk Security

By: Skavoovie

Skavoovie — Tue, 08 Sep 2009 16:40:33 +0000

@ Tony — Cool. Many readers of this site are new to Linux, so I was trying to think of the most "point, click, copy, paste" solution possible. Full-path fix made by Ward makes it a non-issue now of course! 🙂

By: Tony Mace

Tony Mace — Sat, 29 Aug 2009 00:53:50 +0000

ya I knew I could update the path var, but it was easier to just add the direct path for asterisk in the scrip file.

[WM: It’s fixed now. 🙂 ]

By: ward

ward — Fri, 28 Aug 2009 15:12:04 +0000

Some minor tweaks added to [app-blacklist-check] diaplan. Some service providers apparently send FQDN instead of numeric IP address. Now you can add them to your dialplan painlessly. See the sipgate.com example and copy your own providers beside it if necessary.

By: Skavoovie

Skavoovie — Thu, 27 Aug 2009 22:22:21 +0000

@T Mace —

The comment engine destroyed the most important part of my previous post.

That line should read:

PATH=$PATH:(paste here the contents of the clipboard — the output of the previously run command, no spaces).

By: Skavoovie

Skavoovie — Thu, 27 Aug 2009 22:19:24 +0000

@T Mace

If a program runs fine via the CLI, but not via cron, this is almost certainly a path issue. When cron runs a script, it does NOT have the same environment variables as the root user.

The easiest way to fix this would be to:

1) as root, from the CLI execute the following (not the hash sign of course, which is the root prompt):

# echo $PATH

Copy the output results of that command into the clipboard. Take the output of that command and edit /root/ipcountry/ip-checker.sh.

Just below the shebang (#!/bin/bash or whatever shell is being used) — the first line of the shell script, insert the following line:

PATH=$PATH:

Save your changes, and the script will now work properly via cron.

[WM: We all learn something new everyday. Thanks for the tip!]

By: Skavoovie

Skavoovie — Thu, 27 Aug 2009 22:15:34 +0000

The correct cron entry for running every minute of any given time period (every hour, day, month, day of week) is ‘*’, not ‘*/1’.

Although ‘*/1’ *may* work on most newer releases of Red Hat (CentOS), it’s not correct/proper and is bound to leave any seasoned Linux or UNIX user who sees it scratching his head, and is not guaranteed to migrate cleanly to other distributions or versions.

[WM: We were attempting to demonstrate the correct syntax so that the recurring minute delay could be adjusted. It will work as shown… head-scratching or not.]

By: T Mace

T Mace — Thu, 27 Aug 2009 09:40:42 +0000

added /usr/sbin in front of the asterisk call – should be ok now, have to wait 5 min to find out 🙂

[WM: Fixed in latest release as well. Thanks.]

By: T Mace

T Mace — Thu, 27 Aug 2009 09:38:39 +0000

getting:
/root/ipcountry/ip-checker.sh: line 2: asterisk: command not found
/root/ipcountry/ip-checker.sh: line 3: asterisk: command not found

when running from cronjob, works just fine at the CLI

By: Jim Douglas

Jim Douglas — Wed, 26 Aug 2009 17:19:00 +0000

This looks like it will be a fun project for this weekend. Once again, thanks for all your time and resource to make this available to the community.

By: ward

ward — Wed, 26 Aug 2009 17:14:09 +0000

If you downloaded the application prior to 1:10 pm EDT today, see this post for a bug fix. Sorry.