Differences

This shows you the differences between two versions of the page.

--- voice:pbx:freepbx:freepbx_firewall [2020/10/07 11:00]
gcooper
+++ voice:pbx:freepbx:freepbx_firewall [2024/02/06 09:27] (current)
gcooper
@@ Line 1: / Line 1: @@
 ====== FreePBX Security ======
+**Background**: https://www.freepbx.org/a-secure-freepbx-is-a-happy-freepbx/
+**Pro Tips Video**: https://www.youtube.com/watch?v=CD_k5PrY7Xc
+**Setup Guide**: https://www.freepbxhosting.com/comprehensive-freepbx-firewall-setup-guide/
+===== Safe Mode =====
+<note important>Safe Mode is enabled if you **reboot the PBX twice in five minutes** time.
+The **firewall rules activation will be delayed by five minutes** to allow an admin to fix the access problem.</note>
+===== Firewall =====
 **Basic Firewall Configuration - Watch First**: https://youtu.be/CD_k5PrY7Xc
-**Responsive Firewall HowTo**: http://www.freepbxhosting.com/blog/how-to-freepbx-13-firewall-setup/
+Run the **Firewall Wizard**:
-**Overview**: http://wiki.freepbx.org/display/FPG/Firewall
+**FreePBX -> Connectivity -> Firewall -> Settings (tab) -> Re-Run Wizard**
-**Getting Started**: https://wiki.freepbx.org/display/FPG/Firewall+Getting+Started+Guide
+  * Whitelist Host? -> **Yes**
+  * Whitelist Network? -> **No**
+  * Enable Responsive Firewall? -> **Yes**
+  * Automatically configure Asterisk IP Settings? -> **Yes**
-**Permissions**: http://wiki.freepbx.org/display/FPG/Firewall+Permissions
+**FreePBX -> Connectivity -> Firewall -> Networks (tab)**
-**Responsive Firewall**: http://wiki.freepbx.org/display/FPG/Responsive+Firewall
+:!: This tab overrides the default permission for an interface.
-===== Safe Mode =====
+  * **Trusted** -> Only add trusted **admin** IP, network or FQDN
+  * **Local** -> Add IP, network or FQDN for **normal voice traffic** (where phones are)
+**FreePBX -> Connectivity -> Firewall -> Interfaces (tab)**
+:!: This tab sets the **Default Traffic Zones**.
+  * You must set at least one interface as **Internet**
+  * Single-interface systems will be set as **Internet** (''eth0'')
+  * ''Trusted'' means **no filtering** at all
+**FreePBX -> Connectivity -> Firewall -> Responsive Firewall (tab)**
+  * Enable for any protocol in use
+  * This will open ports for limited access
+  * Too many failures will result in that IP being blocked
+**FreePBX -> Connectivity -> Firewall -> Intrusion Detection (tab)**
-<note important>With Safe Mode enabled, if you **reboot the PBX twice in five minutes** time, the **firewall rules activation will be delayed by five minutes** to allow an admin to fix his access problem.</note>
+  * Shows blocked IPs
+  * You can whitelist IPs or networks
 ===== Older Suggested Firewall Example =====

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools