Vicibox Security Concern

Support forum for the ViciBox ISO Server Install and ISO LiveCD Demo

Moderators: enjay, williamconley, Staydog, mflorell, MJCoate, mcargile, Kumba

Vicibox Security Concern

Postby mubeen » Thu May 03, 2018 6:11 pm

Hi,

I have ViciBox v.8.0.1 installed
VERSION: 2.14-667a
BUILD: 180331-1715

I was concerned about the security of my server. I changed the ssh port, sip port (on which SIP is registered with DID or trunk provider), have secure password. I was trying to add IPTables and Fail2ban. Found a walkthrough for Fail2Ban

http://www.vicidial.org/VICIDIALforum/viewtopic.php?f=8&t=38060&p=131913&hilit=iptables#p131913

But I was unable to setup IPTables. Can you please guide me.

On Centos and Ubuntu servers I managed to installed them but vicidial is on SuSE linux which I'm not familiar with.

Also what other measures I can take to secure my server.
ViciBox v.8.0.1
VERSION: 2.14-667a
BUILD: 180331-1715
mubeen
 
Posts: 116
Joined: Mon Feb 19, 2018 1:49 pm

Re: Vicibox Security Concern

Postby williamconley » Thu May 03, 2018 7:47 pm

I was unable to setup IPTables

iptables was probably already running. if it's not:
Code: Select all
yast firewall
This allows you to enable/disable iptables at system start and/or to start/stop it in that screen

Note that these changes can lock you out so be sure you have access to the physical console in case you do lock yourself out.
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: Vicidial Agent Only Beep - Beta
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 20018
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)

Re: Vicibox Security Concern

Postby mubeen » Fri May 04, 2018 10:01 am

Agreed, that's why i'm not messing with it. I was reading a post of your where you mentioned that you posted a walk-through, but couldn't find it. Can you share its link or re-post it?
ViciBox v.8.0.1
VERSION: 2.14-667a
BUILD: 180331-1715
mubeen
 
Posts: 116
Joined: Mon Feb 19, 2018 1:49 pm

Re: Vicibox Security Concern

Postby williamconley » Fri May 04, 2018 10:28 am

Dynamic Good Guys firewall was published years ago. It begins with instructions for whitelist lockdown using the stock firewall in OpenSuSE as pre-configured by Vicibox. After that lockdown is done, the installation of DGG begins. But if you stop right there, you have a whitelisted server that's very secure.

Googling Dynamic Good Guys usually lands on the site, but here's the link:

http://viciwiki.com/index.php/DGG

Note that the first section is "Lockdown in Preparation for Install"
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: Vicidial Agent Only Beep - Beta
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 20018
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)


Return to ViciBox Server Install and Demo

Who is online

Users browsing this forum: No registered users and 57 guests