I am not a security expert but I've seen a lot of Asterisk Servers hacked because of very bad deployments. This very bad deployments include non-protection against SIP enumeration, Apache's weaknesses, non-passwords DISA, etc. But these bad deployments are alse the results of a bad design. I guess we should discuss this matters Saludos/Regards -- Ing. Gerardo Barajas Puente On Thu, Aug 15, 2013 at 9:51 AM, Brian West <brian@freeswitch.org> wrote:
Security Conscience FreeSWITCH Users,
This during our Friday FFA call, we could tag team some bullet points on what we hope to accomplish in the security arena with FreeSWITCH:
1. Process Security: buffer overflows and code review 2. Install Security: Running as Non-Root, SE Linux possibly 3. Voice and Signaling encryption 4. SRTP/ZRTP/DTLS docs, how each can be used. 5. Review TLS docs, guidelines and setup instructions. 6. Recommended steps for a secure deployment. 7. Compatible phones for secure operations
Please comment, toss in your two cents, I want to get a serious discussion started on this list!
What I don't want is 'CRICKETS', lets get this party started...
Thanks, -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Aug 14, 2013, at 1:36 PM, Brian West <brian@freeswitch.org> wrote:
Welcome everyone,
Its time to start the discussion. Who wants to take the lead and start a wiki page to guide our discussion topics? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
_______________________________________________ freeswitch-sec mailing list freeswitch-sec@tron.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec
_______________________________________________ freeswitch-sec mailing list freeswitch-sec@tron.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec