<span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">Perfect</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">.</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">Is</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">this</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">even the</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">right way</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">.</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">I worked</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">on a project</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">for</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">a</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">company</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">here in Brazil</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">,</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">where I developed</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">a layer of</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">business logic</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">that controls the</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">resource limits</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">, such as</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">minutes</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">,</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"></span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">destinations,</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">and especially</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">monetary values.</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">All this</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">based on the</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">usage profile</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">of customers.</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">The result has been</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">fantastic</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">.</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">A</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">little more work</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">for administrators</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">, however</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">,</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">far fewer</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">headaches</span><span class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">.</span><br class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">
<br class="" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"></span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">I would be very</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">happy to</span><span style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)"> </span><span class="hps" style="color:rgb(51,51,51);font-family:arial,sans-serif;font-size:16px;background-color:rgb(245,245,245)">participate.</span> <br>
<br><div class="gmail_quote">2012/2/18 Brian West <span dir="ltr">&lt;<a href="mailto:brian@freeswitch.org">brian@freeswitch.org</a>&gt;</span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap:break-word">I&#39;m talking more of an OS level security protocol... best practice guide.  I&#39;m sure we could make an effort to document these steps.<span class="HOEnZb"><font color="#888888"><div>
<br></div><div>/b</div></font></span><div><div class="h5"><div><br><div><div>On Feb 17, 2012, at 10:50 PM, curriegrad2004 wrote:</div><br><blockquote type="cite"><span style="border-collapse:separate;font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;font-size:medium">I personally think FreeSWITCH is already hardened enough - Only a fool<br>
or uninformed would allow the switch to be... well... left insecure in<br>the first place.<br><br>We could harden FreeSWITCH by just simply re-writing the dialplan from scratch.<br><br>On Fri, Feb 17, 2012 at 8:45 PM, Brian West &lt;<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>&gt; wrote:<br>
<blockquote type="cite">I know we have some BSD folks using it but not sure how well tested it is.<br></blockquote><blockquote type="cite"> I think we need to have a deployment protocol for a secure environment.<br></blockquote>
<blockquote type="cite"> You have to not only worry about the machines security but the toll fraud<br></blockquote><blockquote type="cite">aspect and various other attacks that can originate in that manner.<br></blockquote>
<blockquote type="cite"><br></blockquote><blockquote type="cite">/b<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">On Feb 17, 2012, at 10:26 PM, Mario Augusto Mania wrote:<br></blockquote>
<blockquote type="cite"><br></blockquote><blockquote type="cite">Hi Brian, I am. I&#39;m a brazilian developer and BSD oses user with focus in<br></blockquote><blockquote type="cite">security.<br></blockquote><blockquote type="cite">
<br></blockquote><blockquote type="cite">m3<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">2012/2/18 Brian West &lt;<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>&gt;<br>
</blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">While sitting here in the hospital I have been talking to Philip Zimermann<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">
(ZRTP) via phone...  And we have talked about a FreeSWITCH hardening<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">project (NO JOKES PLEASE).  This is taking FreeSWITCH and security to the<br>
</blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">MAX.  I would like to start this project to make FreeSWITCH more secure in<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">
the long run. (not saying that its not secure now).  Who would be<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">interested in such a project?<br></blockquote><blockquote type="cite"><br>
</blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Thanks,<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">--<br></blockquote><blockquote type="cite"><br></blockquote>
<blockquote type="cite">Brian West<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">FreeSWITCH Solutions, LLC<br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">
Phone: <a href="tel:%2B1%20%28918%29%20420-9266" value="+19184209266" target="_blank">+1 (918) 420-9266</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">Fax:   <a href="tel:%2B1%20%28918%29%20420-9267" value="+19184209267" target="_blank">+1 (918) 420-9267</a><br>
</blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite">--<br></blockquote>
<blockquote type="cite">Brian West<br></blockquote><blockquote type="cite">FreeSWITCH Solutions, LLC<br></blockquote><blockquote type="cite">Phone: <a href="tel:%2B1%20%28918%29%20420-9266" value="+19184209266" target="_blank">+1 (918) 420-9266</a><br>
</blockquote><blockquote type="cite">Fax:   <a href="tel:%2B1%20%28918%29%20420-9267" value="+19184209267" target="_blank">+1 (918) 420-9267</a><br></blockquote><blockquote type="cite"><a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a><br>
</blockquote><blockquote type="cite"><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote><blockquote type="cite"><br></blockquote><blockquote type="cite"><br></blockquote></span><br>
</blockquote></div><br><div>
<span style="text-indent:0px;letter-spacing:normal;font-variant:normal;text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:normal;border-collapse:separate;text-transform:none;font-size:medium;white-space:normal;font-family:Helvetica;word-spacing:0px">-- <br>
Brian West <br>FreeSWITCH Solutions, LLC<br>Phone: <a href="tel:%2B1%20%28918%29%20420-9266" value="+19184209266" target="_blank">+1 (918) 420-9266</a> <br>Fax:   <a href="tel:%2B1%20%28918%29%20420-9267" value="+19184209267" target="_blank">+1 (918) 420-9267</a><br>
<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></span>
</div>
<br></div></div></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br>