Security

A place to share security best practices with the community.

General

• Limit Exposure
  • Use FusionPBX/FreeSWITCH behind a firewall.

Firewall

Limit ports exposed to the Internet.

Ubuntu

• Ubuntu_Firewall

VPN

• • Use a VPN for external endpoints.
    • OpenVPN with a UDP tunnel works great for VOIP.

Layered Security

Fail2ban

monitor logs then bans ip addresses for those that are found in the log to be abusing the system.

• Fail2Ban

For information about Fail2Ban on FreeSWITCH, see their wiki

FreeSWITCH

• Disable the FreeSWITCH modules you are not using. Below is a list of modules not currently being used. This list is not comprehensive. In FusionPBX the modules are found in the menu in system -> modules.
  • • xml rpc (not currently used by FusionPBX)
    • xml curl
    • httapi
• Fail2ban - use it to watch FreeSWITCH logs and ban