I am not a security expert but I've seen a lot of Asterisk Servers hacked because of very bad deployments. This very bad deployments include non-protection against SIP enumeration, Apache's weaknesses, non-passwords DISA, etc. But these bad deployments are alse the results of a bad design. I guess we should discuss this matters

Saludos/Regards
--
Ing. Gerardo Barajas Puente



On Thu, Aug 15, 2013 at 9:51 AM, Brian West <brian@freeswitch.org> wrote:
Security Conscience FreeSWITCH Users,

        This during our Friday FFA call, we could tag team some bullet points on what we hope to accomplish in the security arena with FreeSWITCH:

1. Process Security: buffer overflows and code review
2. Install Security: Running as Non-Root, SE Linux possibly
3. Voice and Signaling encryption
4. SRTP/ZRTP/DTLS docs, how each can be used.
5. Review TLS docs, guidelines and setup instructions.
6. Recommended steps for a secure deployment.
7. Compatible phones for secure operations

Please comment, toss in your two cents, I want to get a serious discussion started on this list!

What I don't want is 'CRICKETS', lets get this party started...

Thanks,
--
Brian West
brian@freeswitch.org
FreeSWITCH Solutions, LLC
PO BOX PO BOX 2531
Brookfield, WI 53008-2531
Twitter: @FreeSWITCH_Wire
http://www.freeswitchbook.com
http://www.freeswitchcookbook.com

T: +1.918.420.9001  |  F: +1.918.420.9002  |  M: +1.918.424.WEST
iNUM: +883 5100 1420 9001
ISN: 410*543
Skype:briankwest
PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)

On Aug 14, 2013, at 1:36 PM, Brian West <brian@freeswitch.org> wrote:

> Welcome everyone,
>
>       Its time to start the discussion.  Who wants to take the lead and start a wiki page to guide our discussion topics?
> --
> Brian West
> brian@freeswitch.org
> FreeSWITCH Solutions, LLC
> PO BOX PO BOX 2531
> Brookfield, WI 53008-2531
> Twitter: @FreeSWITCH_Wire
> http://www.freeswitchbook.com
> http://www.freeswitchcookbook.com
>
> T: +1.918.420.9001  |  F: +1.918.420.9002  |  M: +1.918.424.WEST
> iNUM: +883 5100 1420 9001
> ISN: 410*543
> Skype:briankwest
> PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
>
>
>
>
>
>
>
>
>
> _______________________________________________
> freeswitch-sec mailing list
> freeswitch-sec@tron.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec


_______________________________________________
freeswitch-sec mailing list
freeswitch-sec@tron.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec