<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I'm talking more of an OS level security protocol... best practice guide. I'm sure we could make an effort to document these steps.<div><br></div><div>/b</div><div><br><div><div>On Feb 17, 2012, at 10:50 PM, curriegrad2004 wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">I personally think FreeSWITCH is already hardened enough - Only a fool<br>or uninformed would allow the switch to be... well... left insecure in<br>the first place.<br><br>We could harden FreeSWITCH by just simply re-writing the dialplan from scratch.<br><br>On Fri, Feb 17, 2012 at 8:45 PM, Brian West <<a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a>> wrote:<br><blockquote type="cite">I know we have some BSD folks using it but not sure how well tested it is.<br></blockquote><blockquote type="cite"> I think we need to have a deployment protocol for a secure environment.<br></blockquote><blockquote type="cite"> You have to not only worry about the machines security but the toll fraud<br></blockquote><blockquote type="cite">aspect and various other attacks that can originate in that manner.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">/b<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">On Feb 17, 2012, at 10:26 PM, Mario Augusto Mania wrote:<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Hi Brian, I am. I'm a brazilian developer and BSD oses user with focus in<br></blockquote><blockquote type="cite">security.<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">m3<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">2012/2/18 Brian West <<a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a>><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">While sitting here in the hospital I have been talking to Philip Zimermann<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">(ZRTP) via phone... And we have talked about a FreeSWITCH hardening<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">project (NO JOKES PLEASE). This is taking FreeSWITCH and security to the<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">MAX. I would like to start this project to make FreeSWITCH more secure in<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">the long run. (not saying that its not secure now). Who would be<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">interested in such a project?<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Thanks,<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">--<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Brian West<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">FreeSWITCH Solutions, LLC<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Phone: +1 (918) 420-9266<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Fax: +1 (918) 420-9267<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><a href="http://www.freeswitch.org">http://www.freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">--<br></blockquote><blockquote type="cite">Brian West<br></blockquote><blockquote type="cite">FreeSWITCH Solutions, LLC<br></blockquote><blockquote type="cite">Phone: +1 (918) 420-9266<br></blockquote><blockquote type="cite">Fax: +1 (918) 420-9267<br></blockquote><blockquote type="cite"><a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a><br></blockquote><blockquote type="cite"><a href="http://www.freeswitch.org">http://www.freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote></span><br class="Apple-interchange-newline"></blockquote></div><br><div apple-content-edited="true">
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; ">-- <br>Brian West <br>FreeSWITCH Solutions, LLC<br>Phone: +1 (918) 420-9266 <br>Fax: +1 (918) 420-9267<br><a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a><br>http://www.freeswitch.org</span>
</div>
<br></div></body></html>