There are hundreds, if not thousands, of ways your FS instance can become compromised and vulnerable to toll fraud (or even remote execution, depending on what you put in your config!).<div><br></div><div>I'd personally advice not leaving your 5080 open to the wide internet, consider putting it behind a firewall and allow only your providers to contact 5080, and if possible, block 5060 as well (if you know the IPs/CIDRs your phones are connecting in from). You can also use acl.conf to manage these restrictions, but if you are knew to FS then it's very easy to get this wrong.</div>
<div><br></div><div>Others may argue that using a firewall is overkill, and in some ways complicates your deployment, but if you are new to FS then it's better to be safe than sorry.</div><div><br></div><div>If you haven't done so already, start having a look though the FS wiki [1], and the examples provided in the FS repo [2] [3].</div>
<div><br></div><div>Hope this helps!</div><div><br></div><div>Cal</div><div><br></div><div>[1] <a href="http://wiki.freeswitch.org/wiki/Default_config">http://wiki.freeswitch.org/</a></div><div>[2] <a href="http://wiki.freeswitch.org/wiki/Default_config">http://wiki.freeswitch.org/wiki/Default_config</a></div>
<div>[3] <a href="https://github.com/FreeSWITCH/FreeSWITCH/tree/master/conf/vanilla">https://github.com/FreeSWITCH/FreeSWITCH/tree/master/conf/vanilla</a></div><div><div><br><div class="gmail_quote">On Fri, Jun 14, 2013 at 2:15 PM, Matt Broad <span dir="ltr"><<a href="mailto:matt@inveroak.com" target="_blank">matt@inveroak.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>after taking a look it does seem that the calls are coming in on port 5060 which uses the internal context.</div>
<div><br></div><div>If I have the provider send the traffic to port 5080, does this mean I just need to set up a dialplan in the public folder? And if so is there anything I should be aware of in regards to security?<br>
</div><div><br></div><div>thanks</div><span class="HOEnZb"><font color="#888888"><div>Matt</div></font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On 14 June 2013 14:04, Matt Broad <span dir="ltr"><<a href="mailto:matt@inveroak.com" target="_blank">matt@inveroak.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">thanks for the quick response Avi. <div>I have set up a test account with the provider and have set a number to be directed to me without authentication.<div>
<br></div><div>I see the call coming in but get the output:</div>
<div><br></div><div><div>[WARNING] sofia_reg.c:2503 Can't find user [trunk1@ipaddress]</div>
<div>You must define a domain called 'ipaddress' in your directory and add a user with the id="trunk1" attribute</div><div>and you must configure your device to use the proper domain in it's authentication credentials.</div>
<div><br></div><div>(trunk1 and ipaddress are masks for the actual values).</div><div><br></div><div><br></div><div>Thanks</div><span><font color="#888888"><div>Matt</div>
</font></span></div></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On 14 June 2013 12:47, Avi Marcus <span dir="ltr"><<a href="mailto:avi@avimarcus.net" target="_blank">avi@avimarcus.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>By default the external profile is on port 5080 --calls to that profile don't require authentication, and get sent to the public context.</p>
<p>-Avi</p>
<div class="gmail_quote"><div><div>On Jun 14, 2013 2:12 PM, "Matt Broad" <<a href="mailto:matt@inveroak.com" target="_blank">matt@inveroak.com</a>> wrote:<br type="attribution"></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>
<div dir="ltr">Hi,<div><br></div><div>I have a Freeswitch server up and running and am able to make and receive calls via my VOIP provider. </div><div>I have it set up that my Freeswitch registers to the provider and then I receive/make calls via that gateway.</div>
<div><br></div><div>I now have a new provider that will be providing just inbound calls. They have informed me that I do not need to register with them they will just send the calls to my IP address. </div><div>
My question is how do I configure Freeswitch to allow calls from an IP address? I assume I need to setup an external SIP profile, but does this not require a username and password?</div><div><br clear="all"><div><br></div>
-- <br>Thanks<br>Matt<br><br>This email and any attachments to it are confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of InverOak Limited.<br>
<br>If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error.<br>
<br>This email including any attachments cannot be guaranteed to be 100% secure or error-free as information could be intercepted, corrupted, lost, destroyed, out-dated, or containing viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission.<br>
<br>InverOak Limited is a company registered in England & Wales under company number 04529594, whose registered address is Old Barn house, 2 Wannions Close, Botley, Chesham, Buckinghamshire, HP5 1YA, United Kingdom.
</div></div>
<br></div></div>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Thanks<br>Matt<br><br>This email and any attachments to it are confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of InverOak Limited.<br>
<br>If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error.<br>
<br>This email including any attachments cannot be guaranteed to be 100% secure or error-free as information could be intercepted, corrupted, lost, destroyed, out-dated, or containing viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission.<br>
<br>InverOak Limited is a company registered in England & Wales under company number 04529594, whose registered address is Old Barn house, 2 Wannions Close, Botley, Chesham, Buckinghamshire, HP5 1YA, United Kingdom.
</div>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Thanks<br>Matt<br><br>This email and any attachments to it are confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of InverOak Limited.<br>
<br>If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error.<br>
<br>This email including any attachments cannot be guaranteed to be 100% secure or error-free as information could be intercepted, corrupted, lost, destroyed, out-dated, or containing viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission.<br>
<br>InverOak Limited is a company registered in England & Wales under company number 04529594, whose registered address is Old Barn house, 2 Wannions Close, Botley, Chesham, Buckinghamshire, HP5 1YA, United Kingdom.
</div>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div></div>