한국어

IPPBX/GW

온누리070 플레이스토어 다운로드
    acrobits softphone
     온누리 070 카카오 프러스 친구추가온누리 070 카카오 프러스 친구추가친추
     카카오톡 채팅 상담 카카오톡 채팅 상담카톡
    
     라인상담
     라인으로 공유

     페북공유

   ◎위챗 : speedseoul


  
     PAYPAL
     
     PRICE
     

pixel.gif

    before pay call 0088 from app


iptables for asterisk simple example configuration

2017.08.31 18:33

admin 조회 수:21160



This article looks at a simple example configuration of iptables to work with Asterisk
Verify whether the IPTables installed
[Root @ localhost ~] # rpm -q iptables
iptables-1.3.5-5.3.el5_4.1
Let's see the current rules using the parameter -L
[Root @ localhost ~] # iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination         
ACCEPT all - anywhere anywhere state RELATED, ESTABLISHED 
ACCEPT icmp - anywhere anywhere            
ACCEPT all - anywhere anywhere            
ACCEPT tcp - anywhere anywhere state NEW tcp dpt: ssh 
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination         
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination         

Setting common rules.

Let's create a new rule
# Iptables -P INPUT ACCEPT
This command will allow all incoming connections that will allow us to avoid blocking our connection if configuration is done via the ssh .
# Iptables -F
This command will reset the current default rules and apply only to the created rule.
# Iptables -A INPUT -i lo -j ACCEPT
This simple rule allows all connections to the loopback adapter. The loopback interface is defined by the system as lo and has a default address of 127.0.0.1 -A command adds a new rule at the end of a given INPUT chain. The -i option with the name of lo interface allows all kinds of traffic through a given interface. The -j option specifies a target of ACCEPT rules to accept all connections.
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT
Some parts of this rule is already familiar to you. Next there -m option is used to load the module state. The module checks the state package state and determines whether it is a new-NEW, already created-ESTABLISHED or new, but related-RELATED already established connection. ESTABLISHED state indicates that the packet belongs to an existing connection through which packets go in both directions. NEW sign implies that the package opens up a new connection or packet belongs to the unidirectional flow. RELATED sign indicates that the packet belongs to an existing connection, but it opens up a new connection.
  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
This rule is added to the INPUT chain, and says that all packets coming on the TCP protocol (-p tcp), on port 22 (-dport 22), should be taken (-j ACCEPT). Use of ssh c default port for the connection.
If you want to open access to the Web server chain will also look, except for the port number.
   
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
I note that php applications are very weak spot is often used to break Asterisk.
iptables -P INPUT DROP
Remember, the first rule? When we set the default policy for the input circuits take? This rule changes the default policy for the input strings back in the DROP, which is required if you want to actually block the traffic coming to your server.
iptables -P FORWARD DROP
Deny traffic routing
iptables -P OUTPUT ACCEPT
Allow all outgoing traffic.
service iptables save
Save the created rules.

Rules for Asterisk

Consider the rules for the SIP , the RTP , IAX , the AMI
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
If you are using TCP:
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp -dport the ACCEPT 5060 -j - this rule allows the initiation of SIPconnections to your Asterisk server from a remote user or provider.
If you do not have remote users, such as just sip trunk from the provider, a good idea to allow the initiation of only certain ip addresses or networks.
iptables -A INPUT -p udp -m udp -s 11.11.11.11 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
The first rule allows connection only to the address 11.11.11.11, second to the network to your local 192.168.0.XXX subscribers.
iptables -A INPUT -p udp -m udp -dport 10000 20000 ACCEPT -j - This rule enables RTP traffic. Code initsirovano SIP connections on port 5060 voice streams are sent to the ports of said range. I would also like to note that many of the PBX is used for initiation of SIP connections and RTP traffic different interfaces. Those. if the address of SIP server your ISP 11.11.11.11, the RTP traffic, for example, can come with ip addresses 11.11.11.11, etc.
Rtp port range specified in /etc/asterisk/rtp.conf file.
iptables -A INPUT -p udp -m udp -dport the ACCEPT 4569 -j - Allows connection of protocol IAX . Unlike SIPto initiate a connection and for packet voice RTP uses the same port.
iptables -A INPUT -p tcp -m tcp -dport the ACCEPT 5038 -j - Allows connection to the Asterisk Manager Interface.
service iptables save
Save the new rules 
on debian and ubuntu added iptables-persistent package that uses the iptables-save / iptables-restore
#service iptables-persistent Usage: /etc/init.d/iptables-persistent {start | restart | reload | force-reload | save | flush}

Filtering by name scanners

iptables -I INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
<Spoiler | Setting IPtables a few clicks>
iptables -P INPUT ACCEPT &&
iptables -F &&
service iptables save &&
iptables -A INPUT -i lo -j ACCEPT &&
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT &&
iptables -A INPUT -p tcp --dport 22 -j ACCEPT &&
iptables -A INPUT -p tcp --dport 80 -j ACCEPT &&
iptables -P INPUT DROP &&
iptables -P FORWARD DROP &&
iptables -P OUTPUT ACCEPT &&
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT &&
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT &&
service iptables save &&
iptables -L
</ Spoiler>

FORWARD

/etc/sysctl.conf
 net.ipv4.ip_forward = 0
 net.ipv4.ip_forward = 1
 # Sysctl -p /etc/sysctl.conf
 # Iptables -t nat -A PREROUTING -p udp --dport 5061 -j DNAT --to-destination 192.168.0.1:5060
# Iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt ​​source destination
DNAT udp - anywhere anywhere udp dpt: sip-tls to: 192.168.0.1: 5060

Chain POSTROUTING (policy ACCEPT)
target prot opt ​​source destination

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination
번호 제목 글쓴이 날짜 조회 수
98 php memory and filesize increase upload wav admin 2019.06.25 5045
97 changing SIP drivers to CHAN_PJSIP Please err 에러 admin 2019.06.21 6053
96 /dev/mapper/ubuntu--vg-root filling up admin 2019.04.08 12325
95 VICIdial Scratch Installation CentOS 7 & MariaDB & Asterisk 11 & Latest VICIdial SVN admin 2017.09.02 22467
94 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.09.01 22191
93 List of 5 Open Source Call Center Software Programs admin 2017.08.31 23607
92 Smart Predictive Auto calling Software System: Automatic Phone Calling admin 2017.08.31 21948
91 WombatDialer is highly scalable, multi-server, works with your existing Asterisk PBX. admin 2017.08.31 21604
90 Asterisk based auto dialer test and verified by 300+ concurrent. admin 2017.08.31 20823
89 Automatic Call Distribution (ACD) Asterisk as Call Center admin 2017.08.31 22030
88 Introducing Asterisk Call Distribution ACD asterisk admin 2017.08.31 21972
87 How to build an outbound Call Center with Newfies-Dialer and Asterisk/FreePBX admin 2017.08.31 21518
86 IVR actions asterisk admin 2017.08.31 20904
» iptables for asterisk simple example configuration admin 2017.08.31 21160
84 초보) Asterisk , AsteriskNow 무엇인가? 무슨차이인가? 시작 배우기 쉽게 이해 공부 사용 admin 2017.08.29 21628
83 Installing FreePBX 14 on Debian 8.8 These instructions work fine admin 2017.08.29 21632
82 FreePBX 12 – Getting Started Guide admin 2017.08.29 21010
81 Playing text to speech inside read function in asterisk admin 2017.08.28 22141
80 Speech Recognition on Asterisk: Getting Started admin 2017.08.28 22978
79 github A2Billing is commercially supported by Star2Billing admin 2017.08.26 21082
78 Insert into dialplan Asterisk admin 2017.08.26 21379
77 Google letter agi admin 2017.08.26 20813
76 Top 10 greater worker admin 2017.08.26 21207
75 Dialplan handler routines allow customization admin 2017.08.26 22006
74 AGI asterisk gateway interface synopsis admin 2017.08.26 22005
73 Make Your Own IVR with Asterisk admin 2017.08.26 34793
72 Asterisk dialolan detail explan good easy clean admin 2017.08.26 20722
71 download Installing+AsteriskNOW admin 2017.08.25 20934
70 TwistedWave Online A browser-based audio editor admin 2017.08.25 21289
69 Asterisk/IVR/PBX/VoIP/Contact center/Voicebroadcast engineer admin 2017.08.25 21038
68 asterisk Chapter 6. Dialplan Basics admin 2017.08.25 21226
67 RPi Text to Speech (Speech Synthesis) admin 2017.08.24 20799
66 asterisk freepbx TTS Engine Custom - Amazon Polly - 24 languages admin 2017.08.24 21028
65 asterisk CRM SUGARCRM SuiteCRM admin 2017.08.24 21022
64 Hosting Cheap VPS Hosting that doesn’t feel cheap admin 2017.08.24 22858
63 HOW TO INSTALL FREEPBX ON CENTOS 7 admin 2017.08.24 21199
62 Setup Asterisk 13 with FreePBX 13 in CentOS 7 admin 2017.08.24 21770
61 asterisk XactView V3-CRM Widget admin 2017.08.24 20953
60 Text to Speech User Guide admin 2017.08.24 21137
59 Text to speech for asterisk using Google Translate admin 2017.08.24 22481
58 User Control Panel (UCP) 14+ admin 2017.08.23 21037
57 라즈베리파이, 아스타리스크(asterisk) PBX(사설교환기) admin 2017.08.23 28500
56 How to Install Asterisk on CentOS 7 easy clean explain 깔금한 쉬운 설명 admin 2017.08.23 27717
55 Fusionpbx v4 Freeswitch v1.6 CentOS v7 Install Guide admin 2017.08.23 26336
54 Asterisk Freepbx Install Guide (CentOS v7, Asterisk v13, Freepbx v13) admin 2017.08.23 21431
53 A2Billing v2.2 Install Guide CentOS v7 Asterisk v11 v13 seems to work FreePBX v13 admin 2017.08.23 24517
52 How to install and setup Asterisk 14 (PBX) on CentOS 7 admin 2017.08.23 21791
51 How to Install Asterisk 13 on Ubuntu 16.04 from Source admin 2017.08.23 21485
50 thirdlane PBX price admin 2017.08.23 20893
49 SUGAR CRM admin 2017.08.23 20884
48 NAT 와 VoIP 시그널과 RTP 전송 영향 NAT와 방화벽/STUN/TURN/ICE/SBC admin 2017.08.19 21022
47 음성통화 서버 Asterisk + FreePBX / 통화 시연해보기 admin 2017.08.18 21282
46 우분투 Mumble VoIP 음성채팅서버 구축 admin 2017.08.18 21411
45 User Control Panel (UCP) asterisk freepbx admin 2017.08.17 21577
44 Configuring Your PBX admin 2017.08.17 20771
43 Installing SNG7 Official Distro admin 2017.08.17 21704
42 OPUS and VP9 Bitrates admin 2017.08.17 21376
41 Capturing SIP and RTP traffic using tcpdump admin 2017.08.17 21225
40 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.08.17 21801
39 Price ,,Install Commercial Modules on CentOS and RHEL based admin 2017.08.16 21586
38 asterisk IVR 쉽게 설정하기 admin 2017.08.16 21163
37 Asterisk 가장쉬운 설치 및 설정 사용 방법 이해 할수있게 배우는 순서 안내 설명 admin 2017.08.16 23190
36 /sbin/service httpd start stop web start stop admin 2017.08.16 20883
35 asterisk FreePBX 14, Distro 14 & More! admin 2017.08.16 21383
34 asterisk dialplan 설명 admin 2017.08.16 22156
33 how-to-freepbx-13-firewall-setup admin 2017.08.14 20755
32 AsterSwitchboard CTI Operator Panel for Asterisk admin 2017.08.08 21059
31 Brand New Sealed Sangoma FreePBX 60 - 75 Users or 30 Calls admin 2017.08.05 21468
30 Asterisk 설치 준비 admin 2015.11.15 21508
29 Asterisk 13 Debian 8 admin 2015.11.13 21052
28 FOIP: T.38 Fax Relay vs. G.711 Fax Pass-Through (Fax Over IP) admin 2015.09.24 21206
27 Considerations for Using T.38 versus G.711 for Fax over IP file admin 2015.09.24 21458
26 MP3 to WAV, WMA to WAV, OGG Convert audio to WAV online admin 2015.05.09 22055
25 FAX over IP sofware admin 2015.05.05 21715
24 Fax Configuration FREE PBX and asterisk FAX admin 2015.05.05 21420
23 Asterisk AGI/AMI to ARI Asterisk&FreePbx - IVR setting admin 2015.05.05 30814
22 A simple IVR and Queue example where customer listens to marketing materials .. admin 2015.05.05 21551
21 Asterisk A simple IVR admin 2015.05.05 21633
20 Asterisk tips ivr menu Interactive voice response menus admin 2015.05.05 22541
19 Setup install Asterisk PBX telephony system | VOIP Tutorial admin 2015.05.05 21335
18 Asterisk Downloads AsteriskNOW Software PBX admin 2015.05.05 21320
17 Fax For Asterisk download add on 1 port free IVR prompt G.729 admin 2015.05.05 22037
16 T.38 Fax Gateway Asterisk admin 2015.05.05 21714
15 Setup FAX on Asterisk with DIDForSale SIP DIDs admin 2015.05.05 22077
14 FaxServer using Asterisk admin 2015.05.05 21582
13 fax licenses Asterisk admin 2015.05.05 21476
12 Configuring an Asterisk server admin 2015.05.05 21311
11 FreePBX – Custom FAX to email admin 2015.05.05 21488
10 Incoming Fax Handling admin 2015.05.05 21786
9 Using Asterisk to Detect and Redirect Fax Calls for Communications Server admin 2015.05.05 21939
8 Asterisk fax Asterisk and fax calls Fax over IP admin 2015.05.05 24127
7 Securing Your Asterisk VoIP Server with IPTables admin 2015.05.05 25123
6 A2Billing v2 Install Guide admin 2015.05.05 24918
5 Freepbx on Debian (Debian v7, Asterisk v11, Freepbx v2.11) admin 2015.05.05 23711
4 Asterisk Freepbx Install Guide (CentOS v6, Asterisk v13, Freepbx v12) admin 2015.05.05 25746
3 Asterisk Quick Start Guide admin 2015.05.05 24343
2 Installing AsteriskNOW Official Distro admin 2015.05.05 22953
1 Generic Asterisk SIP Configuration Guide admin 2015.05.05 21640