Difference between revisions of "I have a problem with Security"

From Kolmisoft Wiki
Jump to navigationJump to search
m
Line 1: Line 1:
You see a lot if unknown calls in your statistics with unusual destinations and callerIDs.
You see a lot of unknown calls in your statistics with unusual destinations and callerIDs.


* First of all check if [[Fail2Ban_installation| Fail2Ban]] is installed
* First of all check if [[Fail2Ban_installation| Fail2Ban]] is installed

Revision as of 10:23, 27 April 2011

You see a lot of unknown calls in your statistics with unusual destinations and callerIDs.

You should see such lines after issuing command iptables --list :

[root@kolmisoft]# iptables --list
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         
DROP       all  --  XX.XX.XX.XX         anywhere            
fail2ban-SSH  tcp  --  anywhere             anywhere            tcp dpt:ssh 
fail2ban-ASTERISK  all  --  anywhere             anywhere            
DROP       all  --  XX.XX.XX.XX       anywhere            
DROP       all  --  XX.XX.XX.XX  anywhere      

Where XX.XX.XX.XX is some IP address

  • If you see unauthorized calls from your connected PBX like FreePBX, Elastix:

1. Make sure you use strong passwords for authentication
2. Check if there are unauthorized connections in PBX
3. Block all unknown IPs from your system
4. Some cases indicated problems which are reviewed here and here.
5. Setup a secure VPN connection from your PBX to MOR.