한국어

IPPBX/GW

온누리070 플레이스토어 다운로드
    acrobits softphone
     온누리 070 카카오 프러스 친구추가온누리 070 카카오 프러스 친구추가친추
     카카오톡 채팅 상담 카카오톡 채팅 상담카톡
    
     라인상담
     라인으로 공유

     페북공유

   ◎위챗 : speedseoul


  
     PAYPAL
     
     PRICE
     

pixel.gif

    before pay call 0088 from app


iptables for asterisk simple example configuration

2017.08.31 18:33

admin 조회 수:21162



This article looks at a simple example configuration of iptables to work with Asterisk
Verify whether the IPTables installed
[Root @ localhost ~] # rpm -q iptables
iptables-1.3.5-5.3.el5_4.1
Let's see the current rules using the parameter -L
[Root @ localhost ~] # iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination         
ACCEPT all - anywhere anywhere state RELATED, ESTABLISHED 
ACCEPT icmp - anywhere anywhere            
ACCEPT all - anywhere anywhere            
ACCEPT tcp - anywhere anywhere state NEW tcp dpt: ssh 
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination         
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination         

Setting common rules.

Let's create a new rule
# Iptables -P INPUT ACCEPT
This command will allow all incoming connections that will allow us to avoid blocking our connection if configuration is done via the ssh .
# Iptables -F
This command will reset the current default rules and apply only to the created rule.
# Iptables -A INPUT -i lo -j ACCEPT
This simple rule allows all connections to the loopback adapter. The loopback interface is defined by the system as lo and has a default address of 127.0.0.1 -A command adds a new rule at the end of a given INPUT chain. The -i option with the name of lo interface allows all kinds of traffic through a given interface. The -j option specifies a target of ACCEPT rules to accept all connections.
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT
Some parts of this rule is already familiar to you. Next there -m option is used to load the module state. The module checks the state package state and determines whether it is a new-NEW, already created-ESTABLISHED or new, but related-RELATED already established connection. ESTABLISHED state indicates that the packet belongs to an existing connection through which packets go in both directions. NEW sign implies that the package opens up a new connection or packet belongs to the unidirectional flow. RELATED sign indicates that the packet belongs to an existing connection, but it opens up a new connection.
  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
This rule is added to the INPUT chain, and says that all packets coming on the TCP protocol (-p tcp), on port 22 (-dport 22), should be taken (-j ACCEPT). Use of ssh c default port for the connection.
If you want to open access to the Web server chain will also look, except for the port number.
   
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
I note that php applications are very weak spot is often used to break Asterisk.
iptables -P INPUT DROP
Remember, the first rule? When we set the default policy for the input circuits take? This rule changes the default policy for the input strings back in the DROP, which is required if you want to actually block the traffic coming to your server.
iptables -P FORWARD DROP
Deny traffic routing
iptables -P OUTPUT ACCEPT
Allow all outgoing traffic.
service iptables save
Save the created rules.

Rules for Asterisk

Consider the rules for the SIP , the RTP , IAX , the AMI
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
If you are using TCP:
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp -dport the ACCEPT 5060 -j - this rule allows the initiation of SIPconnections to your Asterisk server from a remote user or provider.
If you do not have remote users, such as just sip trunk from the provider, a good idea to allow the initiation of only certain ip addresses or networks.
iptables -A INPUT -p udp -m udp -s 11.11.11.11 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
The first rule allows connection only to the address 11.11.11.11, second to the network to your local 192.168.0.XXX subscribers.
iptables -A INPUT -p udp -m udp -dport 10000 20000 ACCEPT -j - This rule enables RTP traffic. Code initsirovano SIP connections on port 5060 voice streams are sent to the ports of said range. I would also like to note that many of the PBX is used for initiation of SIP connections and RTP traffic different interfaces. Those. if the address of SIP server your ISP 11.11.11.11, the RTP traffic, for example, can come with ip addresses 11.11.11.11, etc.
Rtp port range specified in /etc/asterisk/rtp.conf file.
iptables -A INPUT -p udp -m udp -dport the ACCEPT 4569 -j - Allows connection of protocol IAX . Unlike SIPto initiate a connection and for packet voice RTP uses the same port.
iptables -A INPUT -p tcp -m tcp -dport the ACCEPT 5038 -j - Allows connection to the Asterisk Manager Interface.
service iptables save
Save the new rules 
on debian and ubuntu added iptables-persistent package that uses the iptables-save / iptables-restore
#service iptables-persistent Usage: /etc/init.d/iptables-persistent {start | restart | reload | force-reload | save | flush}

Filtering by name scanners

iptables -I INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
<Spoiler | Setting IPtables a few clicks>
iptables -P INPUT ACCEPT &&
iptables -F &&
service iptables save &&
iptables -A INPUT -i lo -j ACCEPT &&
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT &&
iptables -A INPUT -p tcp --dport 22 -j ACCEPT &&
iptables -A INPUT -p tcp --dport 80 -j ACCEPT &&
iptables -P INPUT DROP &&
iptables -P FORWARD DROP &&
iptables -P OUTPUT ACCEPT &&
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT &&
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT &&
service iptables save &&
iptables -L
</ Spoiler>

FORWARD

/etc/sysctl.conf
 net.ipv4.ip_forward = 0
 net.ipv4.ip_forward = 1
 # Sysctl -p /etc/sysctl.conf
 # Iptables -t nat -A PREROUTING -p udp --dport 5061 -j DNAT --to-destination 192.168.0.1:5060
# Iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt ​​source destination
DNAT udp - anywhere anywhere udp dpt: sip-tls to: 192.168.0.1: 5060

Chain POSTROUTING (policy ACCEPT)
target prot opt ​​source destination

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination
번호 제목 글쓴이 날짜 조회 수
98 Make Your Own IVR with Asterisk admin 2017.08.26 34793
97 Asterisk AGI/AMI to ARI Asterisk&FreePbx - IVR setting admin 2015.05.05 30815
96 라즈베리파이, 아스타리스크(asterisk) PBX(사설교환기) admin 2017.08.23 28503
95 How to Install Asterisk on CentOS 7 easy clean explain 깔금한 쉬운 설명 admin 2017.08.23 27719
94 Fusionpbx v4 Freeswitch v1.6 CentOS v7 Install Guide admin 2017.08.23 26338
93 Asterisk Freepbx Install Guide (CentOS v6, Asterisk v13, Freepbx v12) admin 2015.05.05 25747
92 Securing Your Asterisk VoIP Server with IPTables admin 2015.05.05 25123
91 A2Billing v2 Install Guide admin 2015.05.05 24919
90 A2Billing v2.2 Install Guide CentOS v7 Asterisk v11 v13 seems to work FreePBX v13 admin 2017.08.23 24518
89 Asterisk Quick Start Guide admin 2015.05.05 24343
88 Asterisk fax Asterisk and fax calls Fax over IP admin 2015.05.05 24127
87 Freepbx on Debian (Debian v7, Asterisk v11, Freepbx v2.11) admin 2015.05.05 23711
86 List of 5 Open Source Call Center Software Programs admin 2017.08.31 23609
85 Asterisk 가장쉬운 설치 및 설정 사용 방법 이해 할수있게 배우는 순서 안내 설명 admin 2017.08.16 23192
84 Speech Recognition on Asterisk: Getting Started admin 2017.08.28 22978
83 Installing AsteriskNOW Official Distro admin 2015.05.05 22953
82 Hosting Cheap VPS Hosting that doesn’t feel cheap admin 2017.08.24 22859
81 Asterisk tips ivr menu Interactive voice response menus admin 2015.05.05 22544
80 Text to speech for asterisk using Google Translate admin 2017.08.24 22483
79 VICIdial Scratch Installation CentOS 7 & MariaDB & Asterisk 11 & Latest VICIdial SVN admin 2017.09.02 22468
78 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.09.01 22192
77 asterisk dialplan 설명 admin 2017.08.16 22157
76 Playing text to speech inside read function in asterisk admin 2017.08.28 22144
75 Setup FAX on Asterisk with DIDForSale SIP DIDs admin 2015.05.05 22077
74 MP3 to WAV, WMA to WAV, OGG Convert audio to WAV online admin 2015.05.09 22055
73 Fax For Asterisk download add on 1 port free IVR prompt G.729 admin 2015.05.05 22039
72 Automatic Call Distribution (ACD) Asterisk as Call Center admin 2017.08.31 22032
71 AGI asterisk gateway interface synopsis admin 2017.08.26 22007
70 Dialplan handler routines allow customization admin 2017.08.26 22006
69 Introducing Asterisk Call Distribution ACD asterisk admin 2017.08.31 21974
68 Smart Predictive Auto calling Software System: Automatic Phone Calling admin 2017.08.31 21951
67 Using Asterisk to Detect and Redirect Fax Calls for Communications Server admin 2015.05.05 21940
66 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.08.17 21801
65 How to install and setup Asterisk 14 (PBX) on CentOS 7 admin 2017.08.23 21794
64 Incoming Fax Handling admin 2015.05.05 21787
63 Setup Asterisk 13 with FreePBX 13 in CentOS 7 admin 2017.08.24 21771
62 T.38 Fax Gateway Asterisk admin 2015.05.05 21716
61 FAX over IP sofware admin 2015.05.05 21716
60 Installing SNG7 Official Distro admin 2017.08.17 21705
59 Generic Asterisk SIP Configuration Guide admin 2015.05.05 21641
58 Asterisk A simple IVR admin 2015.05.05 21634
57 Installing FreePBX 14 on Debian 8.8 These instructions work fine admin 2017.08.29 21632
56 초보) Asterisk , AsteriskNow 무엇인가? 무슨차이인가? 시작 배우기 쉽게 이해 공부 사용 admin 2017.08.29 21628
55 WombatDialer is highly scalable, multi-server, works with your existing Asterisk PBX. admin 2017.08.31 21605
54 Price ,,Install Commercial Modules on CentOS and RHEL based admin 2017.08.16 21587
53 FaxServer using Asterisk admin 2015.05.05 21583
52 User Control Panel (UCP) asterisk freepbx admin 2017.08.17 21580
51 A simple IVR and Queue example where customer listens to marketing materials .. admin 2015.05.05 21553
50 How to build an outbound Call Center with Newfies-Dialer and Asterisk/FreePBX admin 2017.08.31 21518
49 Asterisk 설치 준비 admin 2015.11.15 21509
48 FreePBX – Custom FAX to email admin 2015.05.05 21489
47 How to Install Asterisk 13 on Ubuntu 16.04 from Source admin 2017.08.23 21487
46 fax licenses Asterisk admin 2015.05.05 21477
45 Brand New Sealed Sangoma FreePBX 60 - 75 Users or 30 Calls admin 2017.08.05 21469
44 Considerations for Using T.38 versus G.711 for Fax over IP file admin 2015.09.24 21458
43 Asterisk Freepbx Install Guide (CentOS v7, Asterisk v13, Freepbx v13) admin 2017.08.23 21431
42 Fax Configuration FREE PBX and asterisk FAX admin 2015.05.05 21420
41 우분투 Mumble VoIP 음성채팅서버 구축 admin 2017.08.18 21412
40 asterisk FreePBX 14, Distro 14 & More! admin 2017.08.16 21383
39 Insert into dialplan Asterisk admin 2017.08.26 21379
38 OPUS and VP9 Bitrates admin 2017.08.17 21378
37 Setup install Asterisk PBX telephony system | VOIP Tutorial admin 2015.05.05 21335
36 Asterisk Downloads AsteriskNOW Software PBX admin 2015.05.05 21320
35 Configuring an Asterisk server admin 2015.05.05 21313
34 TwistedWave Online A browser-based audio editor admin 2017.08.25 21290
33 음성통화 서버 Asterisk + FreePBX / 통화 시연해보기 admin 2017.08.18 21284
32 Capturing SIP and RTP traffic using tcpdump admin 2017.08.17 21228
31 asterisk Chapter 6. Dialplan Basics admin 2017.08.25 21227
30 Top 10 greater worker admin 2017.08.26 21208
29 FOIP: T.38 Fax Relay vs. G.711 Fax Pass-Through (Fax Over IP) admin 2015.09.24 21207
28 HOW TO INSTALL FREEPBX ON CENTOS 7 admin 2017.08.24 21199
27 asterisk IVR 쉽게 설정하기 admin 2017.08.16 21166
» iptables for asterisk simple example configuration admin 2017.08.31 21162
25 Text to Speech User Guide admin 2017.08.24 21138
24 github A2Billing is commercially supported by Star2Billing admin 2017.08.26 21086
23 AsterSwitchboard CTI Operator Panel for Asterisk admin 2017.08.08 21061
22 Asterisk 13 Debian 8 admin 2015.11.13 21054
21 Asterisk/IVR/PBX/VoIP/Contact center/Voicebroadcast engineer admin 2017.08.25 21038
20 User Control Panel (UCP) 14+ admin 2017.08.23 21037
19 asterisk freepbx TTS Engine Custom - Amazon Polly - 24 languages admin 2017.08.24 21028
18 NAT 와 VoIP 시그널과 RTP 전송 영향 NAT와 방화벽/STUN/TURN/ICE/SBC admin 2017.08.19 21024
17 asterisk CRM SUGARCRM SuiteCRM admin 2017.08.24 21023
16 FreePBX 12 – Getting Started Guide admin 2017.08.29 21010
15 asterisk XactView V3-CRM Widget admin 2017.08.24 20955
14 download Installing+AsteriskNOW admin 2017.08.25 20934
13 IVR actions asterisk admin 2017.08.31 20905
12 thirdlane PBX price admin 2017.08.23 20894
11 SUGAR CRM admin 2017.08.23 20884
10 /sbin/service httpd start stop web start stop admin 2017.08.16 20883
9 Asterisk based auto dialer test and verified by 300+ concurrent. admin 2017.08.31 20824
8 Google letter agi admin 2017.08.26 20814
7 RPi Text to Speech (Speech Synthesis) admin 2017.08.24 20800
6 Configuring Your PBX admin 2017.08.17 20772
5 how-to-freepbx-13-firewall-setup admin 2017.08.14 20757
4 Asterisk dialolan detail explan good easy clean admin 2017.08.26 20723
3 /dev/mapper/ubuntu--vg-root filling up admin 2019.04.08 12327
2 changing SIP drivers to CHAN_PJSIP Please err 에러 admin 2019.06.21 6055
1 php memory and filesize increase upload wav admin 2019.06.25 5046