한국어

IPPBX/GW

온누리070 플레이스토어 다운로드
    acrobits softphone
     온누리 070 카카오 프러스 친구추가온누리 070 카카오 프러스 친구추가친추
     카카오톡 채팅 상담 카카오톡 채팅 상담카톡
    
     라인상담
     라인으로 공유

     페북공유

   ◎위챗 : speedseoul


  
     PAYPAL
     
     PRICE
     

pixel.gif

    before pay call 0088 from app

    
    
구매가격선택


iptables for asterisk simple example configuration

2017.08.31 18:33

admin 조회 수:17604



This article looks at a simple example configuration of iptables to work with Asterisk
Verify whether the IPTables installed
[Root @ localhost ~] # rpm -q iptables
iptables-1.3.5-5.3.el5_4.1
Let's see the current rules using the parameter -L
[Root @ localhost ~] # iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination         
ACCEPT all - anywhere anywhere state RELATED, ESTABLISHED 
ACCEPT icmp - anywhere anywhere            
ACCEPT all - anywhere anywhere            
ACCEPT tcp - anywhere anywhere state NEW tcp dpt: ssh 
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination         
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination         

Setting common rules.

Let's create a new rule
# Iptables -P INPUT ACCEPT
This command will allow all incoming connections that will allow us to avoid blocking our connection if configuration is done via the ssh .
# Iptables -F
This command will reset the current default rules and apply only to the created rule.
# Iptables -A INPUT -i lo -j ACCEPT
This simple rule allows all connections to the loopback adapter. The loopback interface is defined by the system as lo and has a default address of 127.0.0.1 -A command adds a new rule at the end of a given INPUT chain. The -i option with the name of lo interface allows all kinds of traffic through a given interface. The -j option specifies a target of ACCEPT rules to accept all connections.
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT
Some parts of this rule is already familiar to you. Next there -m option is used to load the module state. The module checks the state package state and determines whether it is a new-NEW, already created-ESTABLISHED or new, but related-RELATED already established connection. ESTABLISHED state indicates that the packet belongs to an existing connection through which packets go in both directions. NEW sign implies that the package opens up a new connection or packet belongs to the unidirectional flow. RELATED sign indicates that the packet belongs to an existing connection, but it opens up a new connection.
  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
This rule is added to the INPUT chain, and says that all packets coming on the TCP protocol (-p tcp), on port 22 (-dport 22), should be taken (-j ACCEPT). Use of ssh c default port for the connection.
If you want to open access to the Web server chain will also look, except for the port number.
   
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
I note that php applications are very weak spot is often used to break Asterisk.
iptables -P INPUT DROP
Remember, the first rule? When we set the default policy for the input circuits take? This rule changes the default policy for the input strings back in the DROP, which is required if you want to actually block the traffic coming to your server.
iptables -P FORWARD DROP
Deny traffic routing
iptables -P OUTPUT ACCEPT
Allow all outgoing traffic.
service iptables save
Save the created rules.

Rules for Asterisk

Consider the rules for the SIP , the RTP , IAX , the AMI
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
If you are using TCP:
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp -dport the ACCEPT 5060 -j - this rule allows the initiation of SIPconnections to your Asterisk server from a remote user or provider.
If you do not have remote users, such as just sip trunk from the provider, a good idea to allow the initiation of only certain ip addresses or networks.
iptables -A INPUT -p udp -m udp -s 11.11.11.11 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
The first rule allows connection only to the address 11.11.11.11, second to the network to your local 192.168.0.XXX subscribers.
iptables -A INPUT -p udp -m udp -dport 10000 20000 ACCEPT -j - This rule enables RTP traffic. Code initsirovano SIP connections on port 5060 voice streams are sent to the ports of said range. I would also like to note that many of the PBX is used for initiation of SIP connections and RTP traffic different interfaces. Those. if the address of SIP server your ISP 11.11.11.11, the RTP traffic, for example, can come with ip addresses 11.11.11.11, etc.
Rtp port range specified in /etc/asterisk/rtp.conf file.
iptables -A INPUT -p udp -m udp -dport the ACCEPT 4569 -j - Allows connection of protocol IAX . Unlike SIPto initiate a connection and for packet voice RTP uses the same port.
iptables -A INPUT -p tcp -m tcp -dport the ACCEPT 5038 -j - Allows connection to the Asterisk Manager Interface.
service iptables save
Save the new rules 
on debian and ubuntu added iptables-persistent package that uses the iptables-save / iptables-restore
#service iptables-persistent Usage: /etc/init.d/iptables-persistent {start | restart | reload | force-reload | save | flush}

Filtering by name scanners

iptables -I INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
<Spoiler | Setting IPtables a few clicks>
iptables -P INPUT ACCEPT &&
iptables -F &&
service iptables save &&
iptables -A INPUT -i lo -j ACCEPT &&
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT &&
iptables -A INPUT -p tcp --dport 22 -j ACCEPT &&
iptables -A INPUT -p tcp --dport 80 -j ACCEPT &&
iptables -P INPUT DROP &&
iptables -P FORWARD DROP &&
iptables -P OUTPUT ACCEPT &&
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT &&
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT &&
service iptables save &&
iptables -L
</ Spoiler>

FORWARD

/etc/sysctl.conf
 net.ipv4.ip_forward = 0
 net.ipv4.ip_forward = 1
 # Sysctl -p /etc/sysctl.conf
 # Iptables -t nat -A PREROUTING -p udp --dport 5061 -j DNAT --to-destination 192.168.0.1:5060
# Iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt ​​source destination
DNAT udp - anywhere anywhere udp dpt: sip-tls to: 192.168.0.1: 5060

Chain POSTROUTING (policy ACCEPT)
target prot opt ​​source destination

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination
번호 제목 글쓴이 날짜 조회 수
98 php memory and filesize increase upload wav admin 2019.06.25 1627
97 changing SIP drivers to CHAN_PJSIP Please err 에러 admin 2019.06.21 2128
96 /dev/mapper/ubuntu--vg-root filling up admin 2019.04.08 8202
95 VICIdial Scratch Installation CentOS 7 & MariaDB & Asterisk 11 & Latest VICIdial SVN admin 2017.09.02 17884
94 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.09.01 17850
93 List of 5 Open Source Call Center Software Programs admin 2017.08.31 18224
92 Smart Predictive Auto calling Software System: Automatic Phone Calling admin 2017.08.31 17692
91 WombatDialer is highly scalable, multi-server, works with your existing Asterisk PBX. admin 2017.08.31 17577
90 Asterisk based auto dialer test and verified by 300+ concurrent. admin 2017.08.31 17394
89 Automatic Call Distribution (ACD) Asterisk as Call Center admin 2017.08.31 18145
88 Introducing Asterisk Call Distribution ACD asterisk admin 2017.08.31 17727
87 How to build an outbound Call Center with Newfies-Dialer and Asterisk/FreePBX admin 2017.08.31 17781
86 IVR actions asterisk admin 2017.08.31 17463
» iptables for asterisk simple example configuration admin 2017.08.31 17604
84 초보) Asterisk , AsteriskNow 무엇인가? 무슨차이인가? 시작 배우기 쉽게 이해 공부 사용 admin 2017.08.29 17912
83 Installing FreePBX 14 on Debian 8.8 These instructions work fine admin 2017.08.29 17933
82 FreePBX 12 – Getting Started Guide admin 2017.08.29 17503
81 Playing text to speech inside read function in asterisk admin 2017.08.28 17648
80 Speech Recognition on Asterisk: Getting Started admin 2017.08.28 19125
79 github A2Billing is commercially supported by Star2Billing admin 2017.08.26 17516
78 Insert into dialplan Asterisk admin 2017.08.26 17510
77 Google letter agi admin 2017.08.26 17450
76 Top 10 greater worker admin 2017.08.26 17556
75 Dialplan handler routines allow customization admin 2017.08.26 17692
74 AGI asterisk gateway interface synopsis admin 2017.08.26 18479
73 Make Your Own IVR with Asterisk admin 2017.08.26 18175
72 Asterisk dialolan detail explan good easy clean admin 2017.08.26 17436
71 download Installing+AsteriskNOW admin 2017.08.25 17464
70 TwistedWave Online A browser-based audio editor admin 2017.08.25 17651
69 Asterisk/IVR/PBX/VoIP/Contact center/Voicebroadcast engineer admin 2017.08.25 17486
68 asterisk Chapter 6. Dialplan Basics admin 2017.08.25 17440
67 RPi Text to Speech (Speech Synthesis) admin 2017.08.24 17394
66 asterisk freepbx TTS Engine Custom - Amazon Polly - 24 languages admin 2017.08.24 17587
65 asterisk CRM SUGARCRM SuiteCRM admin 2017.08.24 17589
64 Hosting Cheap VPS Hosting that doesn’t feel cheap admin 2017.08.24 17483
63 HOW TO INSTALL FREEPBX ON CENTOS 7 admin 2017.08.24 17604
62 Setup Asterisk 13 with FreePBX 13 in CentOS 7 admin 2017.08.24 17872
61 asterisk XactView V3-CRM Widget admin 2017.08.24 17487
60 Text to Speech User Guide admin 2017.08.24 17561
59 Text to speech for asterisk using Google Translate admin 2017.08.24 18020
58 User Control Panel (UCP) 14+ admin 2017.08.23 17604
57 라즈베리파이, 아스타리스크(asterisk) PBX(사설교환기) admin 2017.08.23 20915
56 How to Install Asterisk on CentOS 7 easy clean explain 깔금한 쉬운 설명 admin 2017.08.23 20520
55 Fusionpbx v4 Freeswitch v1.6 CentOS v7 Install Guide admin 2017.08.23 17909
54 Asterisk Freepbx Install Guide (CentOS v7, Asterisk v13, Freepbx v13) admin 2017.08.23 17752
53 A2Billing v2.2 Install Guide CentOS v7 Asterisk v11 v13 seems to work FreePBX v13 admin 2017.08.23 17837
52 How to install and setup Asterisk 14 (PBX) on CentOS 7 admin 2017.08.23 17955
51 How to Install Asterisk 13 on Ubuntu 16.04 from Source admin 2017.08.23 17749
50 thirdlane PBX price admin 2017.08.23 17447
49 SUGAR CRM admin 2017.08.23 17415
48 NAT 와 VoIP 시그널과 RTP 전송 영향 NAT와 방화벽/STUN/TURN/ICE/SBC admin 2017.08.19 17438
47 음성통화 서버 Asterisk + FreePBX / 통화 시연해보기 admin 2017.08.18 17513
46 우분투 Mumble VoIP 음성채팅서버 구축 admin 2017.08.18 17502
45 User Control Panel (UCP) asterisk freepbx admin 2017.08.17 17723
44 Configuring Your PBX admin 2017.08.17 17360
43 Installing SNG7 Official Distro admin 2017.08.17 17626
42 OPUS and VP9 Bitrates admin 2017.08.17 17671
41 Capturing SIP and RTP traffic using tcpdump admin 2017.08.17 17541
40 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.08.17 17526
39 Price ,,Install Commercial Modules on CentOS and RHEL based admin 2017.08.16 17724
38 asterisk IVR 쉽게 설정하기 admin 2017.08.16 17525
37 Asterisk 가장쉬운 설치 및 설정 사용 방법 이해 할수있게 배우는 순서 안내 설명 admin 2017.08.16 18653
36 /sbin/service httpd start stop web start stop admin 2017.08.16 17481
35 asterisk FreePBX 14, Distro 14 & More! admin 2017.08.16 17680
34 asterisk dialplan 설명 admin 2017.08.16 17694
33 how-to-freepbx-13-firewall-setup admin 2017.08.14 17329
32 AsterSwitchboard CTI Operator Panel for Asterisk admin 2017.08.08 17520
31 Brand New Sealed Sangoma FreePBX 60 - 75 Users or 30 Calls admin 2017.08.05 17675
30 Asterisk 설치 준비 admin 2015.11.15 18074
29 Asterisk 13 Debian 8 admin 2015.11.13 17641
28 FOIP: T.38 Fax Relay vs. G.711 Fax Pass-Through (Fax Over IP) admin 2015.09.24 17748
27 Considerations for Using T.38 versus G.711 for Fax over IP file admin 2015.09.24 18071
26 MP3 to WAV, WMA to WAV, OGG Convert audio to WAV online admin 2015.05.09 18311
25 FAX over IP sofware admin 2015.05.05 18291
24 Fax Configuration FREE PBX and asterisk FAX admin 2015.05.05 17998
23 Asterisk AGI/AMI to ARI Asterisk&FreePbx - IVR setting admin 2015.05.05 18216
22 A simple IVR and Queue example where customer listens to marketing materials .. admin 2015.05.05 18199
21 Asterisk A simple IVR admin 2015.05.05 18290
20 Asterisk tips ivr menu Interactive voice response menus admin 2015.05.05 18818
19 Setup install Asterisk PBX telephony system | VOIP Tutorial admin 2015.05.05 17994
18 Asterisk Downloads AsteriskNOW Software PBX admin 2015.05.05 17955
17 Fax For Asterisk download add on 1 port free IVR prompt G.729 admin 2015.05.05 18215
16 T.38 Fax Gateway Asterisk admin 2015.05.05 18195
15 Setup FAX on Asterisk with DIDForSale SIP DIDs admin 2015.05.05 18366
14 FaxServer using Asterisk admin 2015.05.05 18177
13 fax licenses Asterisk admin 2015.05.05 18093
12 Configuring an Asterisk server admin 2015.05.05 18029
11 FreePBX – Custom FAX to email admin 2015.05.05 18042
10 Incoming Fax Handling admin 2015.05.05 18286
9 Using Asterisk to Detect and Redirect Fax Calls for Communications Server admin 2015.05.05 18327
8 Asterisk fax Asterisk and fax calls Fax over IP admin 2015.05.05 18636
7 Securing Your Asterisk VoIP Server with IPTables admin 2015.05.05 19189
6 A2Billing v2 Install Guide admin 2015.05.05 18822
5 Freepbx on Debian (Debian v7, Asterisk v11, Freepbx v2.11) admin 2015.05.05 18596
4 Asterisk Freepbx Install Guide (CentOS v6, Asterisk v13, Freepbx v12) admin 2015.05.05 19657
3 Asterisk Quick Start Guide admin 2015.05.05 18733
2 Installing AsteriskNOW Official Distro admin 2015.05.05 18175
1 Generic Asterisk SIP Configuration Guide admin 2015.05.05 18150