Lorne Gaetz lgaetz

Securing Asterisk VoIP Server with IPTables

This Gist contains my IPTables rules for securing the Asterisk VoIP server. The "string" module is used to identify legitimate users and block attackers.

Link to my detailed Asterisk security tutorial

Learn how to set up your personal VoIP server

↓ ↓ ↓ Scroll down for the IPTables rules ↓ ↓ ↓

	# This is a template .gitignore file for git-managed WordPress projects.
	#
	# Fact: you don't want WordPress core files, or your server-specific
	# configuration files etc., in your project's repository. You just don't.
	#
	# Solution: stick this file up your repository root (which it assumes is
	# also the WordPress root directory) and add exceptions for any plugins,
	# themes, and other directories that should be under version control.
	#
	# See the comments below for more info on how to add exceptions for your

	#!/bin/bash
	set -e #exit as soon as any command fail

	default_ssh_passwd="c2VjcmV0Cg=="
	default_mysql_passwd="c2VjcmV0Cg=="

	exec 9>/tmp/$(basename $0).lock #verify only one instance is running
	if ! flock -n 9 ; then #http://mywiki.wooledge.org/BashFAQ/045
	echo "$(basename $0): another instance is running";
	exit 1

	#!/usr/bin/php -q
	<?php

	/* * * * * * * * * * * * * * * * * * * * ***
	*
	* Latest Version: https://gist.github.com/lgaetz/8633920
	*
	* Description:
	*
	* Script lgaetz-didloopback.php is used on a FreePBX server, with custom dialplan that calls

	#!/bin/bash

	# THIS SCRIPT SETS UP SOME BASIC IP TABLES RULES FOR YOUR SYSTEM.
	# YOU SHOULD BUY A BOOK AND GOOGLE TO UNDERSTAND WHAT IS GOING ON HERE.
	# YOUR SYSTEM'S SECURITY SHOULD NOT BE LEFT UP TO A SCRIPT APPLICATION
	# OR ME. IT IS YOUR RESPONSIBILITY TO ENSURE YOUR OWN SECURITY.
	# THIS IS PRESENTED WITHOUT ANY WARRANTY. ANY USE OF THIS IS AT YOUR OWN RISK
	#
	# Written by James Finstrom ([email protected])
	#

	# The blog post that started it all: https://neocities.org/blog/the-fcc-is-now-rate-limited
	#
	# Current known FCC address ranges:
	# https://news.ycombinator.com/item?id=7716915
	#
	# Confirm/locate FCC IP ranges with this: http://whois.arin.net/rest/net/NET-165-135-0-0-1/pft
	#
	# In your nginx.conf:

	location / {

	<?php
	function it($m,$p){echo ($p?'✔︎':'✘')." It $m\n"; if(!$p){$GLOBALS['f']=1;}}function done(){if(@$GLOBALS['f'])die(1);}

	#!/bin/bash
	echo "BY USING THIS SCRIPT, YOU AGREE TO ASSUME ALL RESPONSIBILITY"
	echo "FOR USE OF THE PROGRAM INCLUDED IN THIS INSTALLATION. NO WARRANTIES"
	echo "EXPRESS OR IMPLIED INCLUDING MERCHANTABILITY AND FITNESS FOR PARTICULAR"
	echo "USE ARE PROVIDED. YOU ASSUME ALL RISKS KNOWN AND UNKNOWN AND AGREE TO"
	echo "HOLD GOATS, CHICKENS, PHIL FROM THE 3RD FLOOR, AND THE ENTIRE"
	echo "WORLD HARMLESS FROM ANY AND ALL LOSS OR DAMAGE"
	echo "WHICH RESULTS FROM YOUR USE OF THIS SOFTWARE. IF ANY OF THESE TERMS"
	echo "AND CONDITIONS ARE RULED TO BE UNENFORCEABLE, YOU AGREE TO ACCEPT ONE"
	echo "DOLLAR IN U.S. CURRENCY AS COMPENSATORY AND PUNITIVE LIQUIDATED DAMAGES"

	<?php

	/** **
	* remotehintpoll.php
	*
	* Created by Lorne Gaetz [email protected]
	*
	* Licensed under GNU GPL version 2 or any later verison.
	*
	* Usage:

	#!/bin/sh

	# sendmail-bluemix
	# current verison of this script: https://gist.github.com/lgaetz/2cd9c54fb1714e0d509f5f8215b3f5e6
	#
	#
	# Original source created by N. Bernaerts: https://github.com/NicolasBernaerts/debian-scripts/tree/master/asterisk
	# modified per: https://jrklein.com/2015/08/17/asterisk-voicemail-transcription-via-ibm-bluemix-speech-to-text-api/
	#
	#

Lorne Gaetz lgaetz

Securing Asterisk VoIP Server with IPTables

Link to my detailed Asterisk security tutorial

License