Differences

This shows you the differences between two versions of the page.

--- voice:pbx:freepbx:freepbx_firewall [2016/11/30 14:26]
gcooper
+++ voice:pbx:freepbx:freepbx_firewall [2024/02/06 09:27] (current)
gcooper
@@ Line 1: / Line 1: @@
-====== FreePBX Firewall ======
+====== FreePBX Security ======
-**New Firewall**: http://wiki.freepbx.org/display/FPG/Firewall
+**Background**: https://www.freepbx.org/a-secure-freepbx-is-a-happy-freepbx/
-**New Firewall Getting Started Guide**: http://wiki.freepbx.org/display/FPG/Firewall+Getting+Started+Guide
+**Pro Tips Video**: https://www.youtube.com/watch?v=CD_k5PrY7Xc
-**A Recommended IPTables Firewall**: http://wiki.freepbx.org/pages/viewpage.action?pageId=33882179
+**Setup Guide**: https://www.freepbxhosting.com/comprehensive-freepbx-firewall-setup-guide/
-**Remote Access and Security Ideas**: http://community.freepbx.org/t/best-options-for-performing-a-security-survey-of-our-freepbx-deployment
+===== Safe Mode =====
-===== Official Suggested Firewall Example =====
+<note important>Safe Mode is enabled if you **reboot the PBX twice in five minutes** time.
+The **firewall rules activation will be delayed by five minutes** to allow an admin to fix the access problem.</note>
+===== Firewall =====
+**Basic Firewall Configuration - Watch First**: https://youtu.be/CD_k5PrY7Xc
+Run the **Firewall Wizard**:
+**FreePBX -> Connectivity -> Firewall -> Settings (tab) -> Re-Run Wizard**
+  * Whitelist Host? -> **Yes**
+  * Whitelist Network? -> **No**
+  * Enable Responsive Firewall? -> **Yes**
+  * Automatically configure Asterisk IP Settings? -> **Yes**
+**FreePBX -> Connectivity -> Firewall -> Networks (tab)**
+:!: This tab overrides the default permission for an interface.
+  * **Trusted** -> Only add trusted **admin** IP, network or FQDN
+  * **Local** -> Add IP, network or FQDN for **normal voice traffic** (where phones are)
+**FreePBX -> Connectivity -> Firewall -> Interfaces (tab)**
+:!: This tab sets the **Default Traffic Zones**.
+  * You must set at least one interface as **Internet**
+  * Single-interface systems will be set as **Internet** (''eth0'')
+  * ''Trusted'' means **no filtering** at all
+**FreePBX -> Connectivity -> Firewall -> Responsive Firewall (tab)**
+  * Enable for any protocol in use
+  * This will open ports for limited access
+  * Too many failures will result in that IP being blocked
+**FreePBX -> Connectivity -> Firewall -> Intrusion Detection (tab)**
+  * Shows blocked IPs
+  * You can whitelist IPs or networks
+===== Older Suggested Firewall Example =====
 <file>

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools