<div dir="ltr">You can pass PCI-DSS with proper firewall rules. For example, if you FS server only needs to accept calls from certain IP addresses, firewalling it out will pass the automated tests easily.<div><br></div><div>I know it's not ideal, but I've managed to make unpatched Windows 2003 servers pass the automated tests just by hiding them behind a proxy. </div><div><br></div><div>I'm not condoning this practise, just timelines on that particular project required that they pass until we could upgrade them to Windows 2012. It bought us the time we needed</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 19 November 2015 at 08:21, Andrew Keil <span dir="ltr"><<a href="mailto:andrew.keil@visytel.com" target="_blank">andrew.keil@visytel.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-AU" link="blue" vlink="purple">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Thanks for your feedback.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a> [mailto:<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a>]
<b>On Behalf Of </b>Michael Jerris<br>
<b>Sent:</b> Thursday, 19 November 2015 11:12 AM<span class=""><br>
<b>To:</b> FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org" target="_blank">freeswitch-users@lists.freeswitch.org</a>><br>
</span><b>Subject:</b> Re: [Freeswitch-users] FreeSWITCH version 1.4.x end of life - recommendation please<u></u><u></u></span></p>
</div>
</div><div><div class="h5">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Nov 18, 2015, at 6:49 PM, Andrew Keil <<a href="mailto:andrew.keil@visytel.com" target="_blank">andrew.keil@visytel.com</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">To FreeSWITCH users,<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">In order for my client to plan for FreeSWITCH version 1.4.x end of life, I have a few questions that I hope the FreeSWITCH team can help answer:<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <u></u><u></u></span></p>
</div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">1)</span><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Since
the FreeSWITCH version 1.4.x branch is going end of life in early 2016, then obviously I need my client to migrate to the FreeSWITCH version 1.6.x branch ASAP. Is there a definite date when the FreeSWITCH version 1.4.x branch is going end of life?<u></u><u></u></span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">We don't have a specific date set, we will provide as many critical and security fixes as we can for it for a while. That being said, we are already at the point where significant portions of fixes are not possible to back-port due to
significant changes in the code between 1.4 and 1.6. This continues to get worse over time.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div style="margin-left:36.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">2)</span><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Regarding
the FreeSWITCH version 1.6.x branch:<u></u><u></u></span></p>
</div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">a.</span><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Can
this run on CentOS 6.x (ie. the latest release of CentOS 6)?<u></u><u></u></span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">We have made minimal effort to try to package dependencies for it, and it was abandoned as it was determined to be too much work. Its probably possible, but expect to:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">1. Not have any support for video features.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">2. Spend significant time working on packaging your own dependencies and testing.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<u></u><u></u></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div style="margin-left:72.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <u></u><u></u></span></p>
</div>
<div style="margin-left:108.0pt">
<p class="MsoNormal"><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">i.</span><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">I
understand that CentOS 7 is recommended, however upgrading the OS is a much bigger task than simply upgrading FreeSWITCH. Especially since my client is also PCI compliant to enable credit card processing, which requires rigorous Operating System lockdown.
Currently my client will not be using the video features inside FreeSWITCH (ie. initially only using the feature set inside the FreeSWITCH version 1.4.x branch).<u></u><u></u></span></p>
</div>
<div style="margin-left:108.0pt">
<p class="MsoNormal"><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">ii.</span><span style="font-size:7.0pt"> <span> </span></span><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Is
there anything I should be aware of when trying to get FreeSWITCH version 1.6.x branch working on CentOS 6?<u></u><u></u></span></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">We have done zero testing on it. You will have to do all the dependency packaging back-porting for the deps you need and do testing and let us know.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<u></u><u></u></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">I appreciate any feedback that you are able to provide to make this process as painless as possible.<u></u><u></u></span></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div></div></div>
</div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><b>Andrew Cassidy BSc (Hons) MBCS SSCA</b><div>Managing Director<div><div><img src="http://www.cassidywebservices.co.uk/static/emailsig.png"><br></div><div><br><div><b style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif"><a href="mailto:info@cassidywebservices.co.uk" style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif" target="_blank">T</a> </b>03300 100 960
<b style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif"><a href="mailto:info@cassidywebservices.co.uk" style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif" target="_blank">F</a> </b>03300 100 961</div><div><b style="text-decoration:none;font-family:sans-serif"><a href="mailto:info@cassidywebservices.co.uk" style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif" target="_blank">E</a> </b><a href="mailto:andrew@cassidywebservices.co.uk" target="_blank">andrew@cassidywebservices.co.uk</a></div><div><b style="text-decoration:none;font-family:sans-serif"><a href="mailto:info@cassidywebservices.co.uk" style="color:rgb(51,135,171);text-decoration:none;font-family:sans-serif" target="_blank">W</a> </b><a href="http://www.cassidywebservices.co.uk" target="_blank">www.cassidywebservices.co.uk</a></div></div></div></div></div></div>
</div>