Welcome everyone, Its time to start the discussion. Who wants to take the lead and start a wiki page to guide our discussion topics? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
Security Conscience FreeSWITCH Users, This during our Friday FFA call, we could tag team some bullet points on what we hope to accomplish in the security arena with FreeSWITCH: 1. Process Security: buffer overflows and code review 2. Install Security: Running as Non-Root, SE Linux possibly 3. Voice and Signaling encryption 4. SRTP/ZRTP/DTLS docs, how each can be used. 5. Review TLS docs, guidelines and setup instructions. 6. Recommended steps for a secure deployment. 7. Compatible phones for secure operations Please comment, toss in your two cents, I want to get a serious discussion started on this list! What I don't want is 'CRICKETS', lets get this party started... Thanks, -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED) On Aug 14, 2013, at 1:36 PM, Brian West <brian@freeswitch.org> wrote:
Welcome everyone,
Its time to start the discussion. Who wants to take the lead and start a wiki page to guide our discussion topics? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
_______________________________________________ freeswitch-sec mailing list freeswitch-sec@tron.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec
I am not a security expert but I've seen a lot of Asterisk Servers hacked because of very bad deployments. This very bad deployments include non-protection against SIP enumeration, Apache's weaknesses, non-passwords DISA, etc. But these bad deployments are alse the results of a bad design. I guess we should discuss this matters Saludos/Regards -- Ing. Gerardo Barajas Puente On Thu, Aug 15, 2013 at 9:51 AM, Brian West <brian@freeswitch.org> wrote:
Security Conscience FreeSWITCH Users,
This during our Friday FFA call, we could tag team some bullet points on what we hope to accomplish in the security arena with FreeSWITCH:
1. Process Security: buffer overflows and code review 2. Install Security: Running as Non-Root, SE Linux possibly 3. Voice and Signaling encryption 4. SRTP/ZRTP/DTLS docs, how each can be used. 5. Review TLS docs, guidelines and setup instructions. 6. Recommended steps for a secure deployment. 7. Compatible phones for secure operations
Please comment, toss in your two cents, I want to get a serious discussion started on this list!
What I don't want is 'CRICKETS', lets get this party started...
Thanks, -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
On Aug 14, 2013, at 1:36 PM, Brian West <brian@freeswitch.org> wrote:
Welcome everyone,
Its time to start the discussion. Who wants to take the lead and start a wiki page to guide our discussion topics? -- Brian West brian@freeswitch.org FreeSWITCH Solutions, LLC PO BOX PO BOX 2531 Brookfield, WI 53008-2531 Twitter: @FreeSWITCH_Wire http://www.freeswitchbook.com http://www.freeswitchcookbook.com
T: +1.918.420.9001 | F: +1.918.420.9002 | M: +1.918.424.WEST iNUM: +883 5100 1420 9001 ISN: 410*543 Skype:briankwest PGP Key: http://www.bkw.org/key.txt (AB93356707C76CED)
_______________________________________________ freeswitch-sec mailing list freeswitch-sec@tron.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec
_______________________________________________ freeswitch-sec mailing list freeswitch-sec@tron.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-sec
participants (2)
-
Brian West
-
Gerardo Barajas