Difference between revisions of "Security"

From FusionPBX
Jump to: navigation, search
(FreeSWITCH)
(General)
Line 5: Line 5:
 
** Use FusionPBX/FreeSWITCH behind NAT
 
** Use FusionPBX/FreeSWITCH behind NAT
 
** Limit ports exposed to the Internet
 
** Limit ports exposed to the Internet
* Fail2ban - monitor and bans
+
* Fail2ban - monitor logs then bans ip addresses for those that are found in the log to be abusing the system.
  
 
==FreeSWITCH==
 
==FreeSWITCH==

Revision as of 19:33, 29 September 2012

A place to share security best practices with the community.

General

  • Limit Exposure
    • Use FusionPBX/FreeSWITCH behind NAT
    • Limit ports exposed to the Internet
  • Fail2ban - monitor logs then bans ip addresses for those that are found in the log to be abusing the system.

FreeSWITCH

  • Disable the FreeSWITCH modules you are not using. Below is a list of modules not currently being used. This list is not comprehensive. In FusionPBX the modules are found in the menu in system -> modules.
      • xml rpc (not currently used by FusionPBX)
      • xml curl
      • httapi
  • Fail2ban - used to watch FreeSWITCH logs