한국어

IPPBX/GW

온누리070 플레이스토어 다운로드
    acrobits softphone
     온누리 070 카카오 프러스 친구추가온누리 070 카카오 프러스 친구추가친추
     카카오톡 채팅 상담 카카오톡 채팅 상담카톡
    
     라인상담
     라인으로 공유

     페북공유

   ◎위챗 : speedseoul


  
     PAYPAL
     
     PRICE
     

pixel.gif

    before pay call 0088 from app


iptables for asterisk simple example configuration

2017.08.31 18:33

admin 조회 수:22263



This article looks at a simple example configuration of iptables to work with Asterisk
Verify whether the IPTables installed
[Root @ localhost ~] # rpm -q iptables
iptables-1.3.5-5.3.el5_4.1
Let's see the current rules using the parameter -L
[Root @ localhost ~] # iptables -L
Chain INPUT (policy ACCEPT)
target prot opt ​​source destination         
ACCEPT all - anywhere anywhere state RELATED, ESTABLISHED 
ACCEPT icmp - anywhere anywhere            
ACCEPT all - anywhere anywhere            
ACCEPT tcp - anywhere anywhere state NEW tcp dpt: ssh 
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain FORWARD (policy ACCEPT)
target prot opt ​​source destination         
REJECT all - anywhere anywhere reject-with icmp-host-prohibited 

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination         

Setting common rules.

Let's create a new rule
# Iptables -P INPUT ACCEPT
This command will allow all incoming connections that will allow us to avoid blocking our connection if configuration is done via the ssh .
# Iptables -F
This command will reset the current default rules and apply only to the created rule.
# Iptables -A INPUT -i lo -j ACCEPT
This simple rule allows all connections to the loopback adapter. The loopback interface is defined by the system as lo and has a default address of 127.0.0.1 -A command adds a new rule at the end of a given INPUT chain. The -i option with the name of lo interface allows all kinds of traffic through a given interface. The -j option specifies a target of ACCEPT rules to accept all connections.
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT
Some parts of this rule is already familiar to you. Next there -m option is used to load the module state. The module checks the state package state and determines whether it is a new-NEW, already created-ESTABLISHED or new, but related-RELATED already established connection. ESTABLISHED state indicates that the packet belongs to an existing connection through which packets go in both directions. NEW sign implies that the package opens up a new connection or packet belongs to the unidirectional flow. RELATED sign indicates that the packet belongs to an existing connection, but it opens up a new connection.
  iptables -A INPUT -p tcp --dport 22 -j ACCEPT
This rule is added to the INPUT chain, and says that all packets coming on the TCP protocol (-p tcp), on port 22 (-dport 22), should be taken (-j ACCEPT). Use of ssh c default port for the connection.
If you want to open access to the Web server chain will also look, except for the port number.
   
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
I note that php applications are very weak spot is often used to break Asterisk.
iptables -P INPUT DROP
Remember, the first rule? When we set the default policy for the input circuits take? This rule changes the default policy for the input strings back in the DROP, which is required if you want to actually block the traffic coming to your server.
iptables -P FORWARD DROP
Deny traffic routing
iptables -P OUTPUT ACCEPT
Allow all outgoing traffic.
service iptables save
Save the created rules.

Rules for Asterisk

Consider the rules for the SIP , the RTP , IAX , the AMI
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT
If you are using TCP:
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT
iptables -A INPUT -p udp -m udp -dport the ACCEPT 5060 -j - this rule allows the initiation of SIPconnections to your Asterisk server from a remote user or provider.
If you do not have remote users, such as just sip trunk from the provider, a good idea to allow the initiation of only certain ip addresses or networks.
iptables -A INPUT -p udp -m udp -s 11.11.11.11 --dport 5060 -j ACCEPT
iptables -A INPUT -p udp -m udp -s 192.168.0.0/24 --dport 5060 -j ACCEPT
The first rule allows connection only to the address 11.11.11.11, second to the network to your local 192.168.0.XXX subscribers.
iptables -A INPUT -p udp -m udp -dport 10000 20000 ACCEPT -j - This rule enables RTP traffic. Code initsirovano SIP connections on port 5060 voice streams are sent to the ports of said range. I would also like to note that many of the PBX is used for initiation of SIP connections and RTP traffic different interfaces. Those. if the address of SIP server your ISP 11.11.11.11, the RTP traffic, for example, can come with ip addresses 11.11.11.11, etc.
Rtp port range specified in /etc/asterisk/rtp.conf file.
iptables -A INPUT -p udp -m udp -dport the ACCEPT 4569 -j - Allows connection of protocol IAX . Unlike SIPto initiate a connection and for packet voice RTP uses the same port.
iptables -A INPUT -p tcp -m tcp -dport the ACCEPT 5038 -j - Allows connection to the Asterisk Manager Interface.
service iptables save
Save the new rules 
on debian and ubuntu added iptables-persistent package that uses the iptables-save / iptables-restore
#service iptables-persistent Usage: /etc/init.d/iptables-persistent {start | restart | reload | force-reload | save | flush}

Filtering by name scanners

iptables -I INPUT -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sip-scan" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sundayddr" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "iWar" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipsak" --algo bm -j DROP
iptables -I INPUT -p udp --dport 5060 -m string --string "sipvicious" --algo bm -j DROP
<Spoiler | Setting IPtables a few clicks>
iptables -P INPUT ACCEPT &&
iptables -F &&
service iptables save &&
iptables -A INPUT -i lo -j ACCEPT &&
iptables -A INPUT -m state --state ESTABLISHED, RELATED -j ACCEPT &&
iptables -A INPUT -p tcp --dport 22 -j ACCEPT &&
iptables -A INPUT -p tcp --dport 80 -j ACCEPT &&
iptables -P INPUT DROP &&
iptables -P FORWARD DROP &&
iptables -P OUTPUT ACCEPT &&
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT &&
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 10000: 20000 -j ACCEPT &&
iptables -A INPUT -p udp -m udp --dport 4569 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 5038 -j ACCEPT &&
service iptables save &&
iptables -L
</ Spoiler>

FORWARD

/etc/sysctl.conf
 net.ipv4.ip_forward = 0
 net.ipv4.ip_forward = 1
 # Sysctl -p /etc/sysctl.conf
 # Iptables -t nat -A PREROUTING -p udp --dport 5061 -j DNAT --to-destination 192.168.0.1:5060
# Iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt ​​source destination
DNAT udp - anywhere anywhere udp dpt: sip-tls to: 192.168.0.1: 5060

Chain POSTROUTING (policy ACCEPT)
target prot opt ​​source destination

Chain OUTPUT (policy ACCEPT)
target prot opt ​​source destination
번호 제목 글쓴이 날짜 조회 수
98 Generic Asterisk SIP Configuration Guide admin 2015.05.05 22587
97 Installing AsteriskNOW Official Distro admin 2015.05.05 23910
96 Asterisk Quick Start Guide admin 2015.05.05 25299
95 Asterisk Freepbx Install Guide (CentOS v6, Asterisk v13, Freepbx v12) admin 2015.05.05 26856
94 Freepbx on Debian (Debian v7, Asterisk v11, Freepbx v2.11) admin 2015.05.05 24643
93 A2Billing v2 Install Guide admin 2015.05.05 25916
92 Securing Your Asterisk VoIP Server with IPTables admin 2015.05.05 26129
91 Asterisk fax Asterisk and fax calls Fax over IP admin 2015.05.05 25066
90 Using Asterisk to Detect and Redirect Fax Calls for Communications Server admin 2015.05.05 22895
89 Incoming Fax Handling admin 2015.05.05 22760
88 FreePBX – Custom FAX to email admin 2015.05.05 22466
87 Configuring an Asterisk server admin 2015.05.05 22259
86 fax licenses Asterisk admin 2015.05.05 22401
85 FaxServer using Asterisk admin 2015.05.05 22506
84 Setup FAX on Asterisk with DIDForSale SIP DIDs admin 2015.05.05 23033
83 T.38 Fax Gateway Asterisk admin 2015.05.05 22686
82 Fax For Asterisk download add on 1 port free IVR prompt G.729 admin 2015.05.05 22958
81 Asterisk Downloads AsteriskNOW Software PBX admin 2015.05.05 22240
80 Setup install Asterisk PBX telephony system | VOIP Tutorial admin 2015.05.05 23339
79 Asterisk tips ivr menu Interactive voice response menus admin 2015.05.05 23538
78 Asterisk A simple IVR admin 2015.05.05 22582
77 A simple IVR and Queue example where customer listens to marketing materials .. admin 2015.05.05 22497
76 Asterisk AGI/AMI to ARI Asterisk&FreePbx - IVR setting admin 2015.05.05 31829
75 Fax Configuration FREE PBX and asterisk FAX admin 2015.05.05 22414
74 FAX over IP sofware admin 2015.05.05 22638
73 MP3 to WAV, WMA to WAV, OGG Convert audio to WAV online admin 2015.05.09 23011
72 Considerations for Using T.38 versus G.711 for Fax over IP file admin 2015.09.24 22414
71 FOIP: T.38 Fax Relay vs. G.711 Fax Pass-Through (Fax Over IP) admin 2015.09.24 22174
70 Asterisk 13 Debian 8 admin 2015.11.13 21869
69 Asterisk 설치 준비 admin 2015.11.15 22327
68 Brand New Sealed Sangoma FreePBX 60 - 75 Users or 30 Calls admin 2017.08.05 22334
67 AsterSwitchboard CTI Operator Panel for Asterisk admin 2017.08.08 21903
66 how-to-freepbx-13-firewall-setup admin 2017.08.14 21563
65 asterisk dialplan 설명 admin 2017.08.16 23130
64 asterisk FreePBX 14, Distro 14 & More! admin 2017.08.16 22208
63 /sbin/service httpd start stop web start stop admin 2017.08.16 21864
62 Asterisk 가장쉬운 설치 및 설정 사용 방법 이해 할수있게 배우는 순서 안내 설명 admin 2017.08.16 24161
61 asterisk IVR 쉽게 설정하기 admin 2017.08.16 22073
60 Price ,,Install Commercial Modules on CentOS and RHEL based admin 2017.08.16 22510
59 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.08.17 22694
58 Capturing SIP and RTP traffic using tcpdump admin 2017.08.17 22116
57 OPUS and VP9 Bitrates admin 2017.08.17 22192
56 Installing SNG7 Official Distro admin 2017.08.17 22600
55 Configuring Your PBX admin 2017.08.17 21600
54 User Control Panel (UCP) asterisk freepbx admin 2017.08.17 22444
53 우분투 Mumble VoIP 음성채팅서버 구축 admin 2017.08.18 22623
52 음성통화 서버 Asterisk + FreePBX / 통화 시연해보기 admin 2017.08.18 22361
51 NAT 와 VoIP 시그널과 RTP 전송 영향 NAT와 방화벽/STUN/TURN/ICE/SBC admin 2017.08.19 21883
50 SUGAR CRM admin 2017.08.23 22047
49 thirdlane PBX price admin 2017.08.23 21971
48 How to Install Asterisk 13 on Ubuntu 16.04 from Source admin 2017.08.23 22432
47 How to install and setup Asterisk 14 (PBX) on CentOS 7 admin 2017.08.23 22716
46 A2Billing v2.2 Install Guide CentOS v7 Asterisk v11 v13 seems to work FreePBX v13 admin 2017.08.23 25530
45 Asterisk Freepbx Install Guide (CentOS v7, Asterisk v13, Freepbx v13) admin 2017.08.23 22294
44 Fusionpbx v4 Freeswitch v1.6 CentOS v7 Install Guide admin 2017.08.23 27342
43 How to Install Asterisk on CentOS 7 easy clean explain 깔금한 쉬운 설명 admin 2017.08.23 28682
42 라즈베리파이, 아스타리스크(asterisk) PBX(사설교환기) admin 2017.08.23 29609
41 User Control Panel (UCP) 14+ admin 2017.08.23 21887
40 Text to speech for asterisk using Google Translate admin 2017.08.24 23468
39 Text to Speech User Guide admin 2017.08.24 22059
38 asterisk XactView V3-CRM Widget admin 2017.08.24 21816
37 Setup Asterisk 13 with FreePBX 13 in CentOS 7 admin 2017.08.24 22644
36 HOW TO INSTALL FREEPBX ON CENTOS 7 admin 2017.08.24 22368
35 Hosting Cheap VPS Hosting that doesn’t feel cheap admin 2017.08.24 23758
34 asterisk CRM SUGARCRM SuiteCRM admin 2017.08.24 21927
33 asterisk freepbx TTS Engine Custom - Amazon Polly - 24 languages admin 2017.08.24 21930
32 RPi Text to Speech (Speech Synthesis) admin 2017.08.24 21689
31 asterisk Chapter 6. Dialplan Basics admin 2017.08.25 22147
30 Asterisk/IVR/PBX/VoIP/Contact center/Voicebroadcast engineer admin 2017.08.25 21935
29 TwistedWave Online A browser-based audio editor admin 2017.08.25 22266
28 download Installing+AsteriskNOW admin 2017.08.25 21868
27 Asterisk dialolan detail explan good easy clean admin 2017.08.26 21618
26 AGI asterisk gateway interface synopsis admin 2017.08.26 22932
25 Top 10 greater worker admin 2017.08.26 22220
24 Google letter agi admin 2017.08.26 21763
23 Dialplan handler routines allow customization admin 2017.08.26 22945
22 Make Your Own IVR with Asterisk admin 2017.08.26 36352
21 Insert into dialplan Asterisk admin 2017.08.26 22271
20 github A2Billing is commercially supported by Star2Billing admin 2017.08.26 22020
19 Speech Recognition on Asterisk: Getting Started admin 2017.08.28 24021
18 Playing text to speech inside read function in asterisk admin 2017.08.28 23102
17 FreePBX 12 – Getting Started Guide admin 2017.08.29 21947
16 Installing FreePBX 14 on Debian 8.8 These instructions work fine admin 2017.08.29 22563
15 초보) Asterisk , AsteriskNow 무엇인가? 무슨차이인가? 시작 배우기 쉽게 이해 공부 사용 admin 2017.08.29 22583
» iptables for asterisk simple example configuration admin 2017.08.31 22263
13 IVR actions asterisk admin 2017.08.31 21770
12 How to build an outbound Call Center with Newfies-Dialer and Asterisk/FreePBX admin 2017.08.31 23099
11 Introducing Asterisk Call Distribution ACD asterisk admin 2017.08.31 22913
10 Automatic Call Distribution (ACD) Asterisk as Call Center admin 2017.08.31 23196
9 Asterisk based auto dialer test and verified by 300+ concurrent. admin 2017.08.31 22191
8 WombatDialer is highly scalable, multi-server, works with your existing Asterisk PBX. admin 2017.08.31 22551
7 Smart Predictive Auto calling Software System: Automatic Phone Calling admin 2017.08.31 22906
6 List of 5 Open Source Call Center Software Programs admin 2017.08.31 24647
5 Asterisk Answering Machine Detection (AMD) Configuration admin 2017.09.01 23148
4 VICIdial Scratch Installation CentOS 7 & MariaDB & Asterisk 11 & Latest VICIdial SVN admin 2017.09.02 23469
3 /dev/mapper/ubuntu--vg-root filling up admin 2019.04.08 13313
2 changing SIP drivers to CHAN_PJSIP Please err 에러 admin 2019.06.21 6977
1 php memory and filesize increase upload wav admin 2019.06.25 5994