Best posts made by markjcrane

@StuartJordan Next time you decide to spin it up contact me and I will help you with the NAT issue. I have a little time this week. Next week I'm teaching FusionPBX November Admin training as show at www.fusionpbx.com. So if not this week I'll have more time after the training is over.

Another thing you can do for increased security is use domain names and don't register phones to IP addresses as the authentication realm.

Reason for this is when anyone attempts to register to the IP address we know they are not a customer. We have a fail2ban rule that can be enabled

Edit file /etc/fail2ban/jail.conf find enabled = false and set it to true the two sections that should be enabled are:

[freeswitch-ip-tcp]
[freeswitch-ip-udp]

service fail2ban restart

It pains me a bit to have these disabled but currently they are disabled as we need to inform the user to use domain names instead of IP addresses if they want tighter security. When we can educate users enough we may default these to enabled.

@markjcrane With this fail2ban rule a bot or a hacker tries to brute force and register to the IP address of the server they are banned on the first attempt.

As far as many comments about redundancy and not all eggs in one basket. Just need to have a backup system that runs a nightly backup and restore script to another server or two. Setting up a server cluster is also possible for both systems.

@JaredBusch We are continually improving FusionPBX current master branch has 5 new import tools to add data faster. I think it will help a lot of people save time migrating. A lot of improvements to the provisioning system. GS Wave QR code instant provisioning tool. Messages feature for SMS and more... Will keep polishing, fixing bugs and adding relevant features.

@markjcrane said in Setting up FusionPBX:

Debian 9

Thought I should give an update.

FreeSWITCH 1.8 officially supports Debian 9. FusionPBX install script shown on the downloads page for FusionPBX website will install Debian 9 (stretch). Also a few days ago I spent some time helping someone get it working on Raspberry Pi Raspbian based on Debian 9 stretch. We ran the FusionPBX install script will work fine for Raspberry Pi 3 Model b.

FusionPBX uses the same terminology as FreeSWITCH for Gateways (trunks) and so this is documented at the following links.

Twilio
https://www.twilio.com/blog/2013/03/trying-out-the-twilio-sip-noun-using-freeswitch.html

Flowroute
https://freeswitch.org/confluence/pages/viewpage.action?pageId=2883692

Many providers
https://freeswitch.org/confluence/display/FREESWITCH/Providers+ITSPs

@jaredbusch Sorry most effort has gone into Debian then FreeBSD and CentOS script was added by another developer based on the Debian script I'll give it another couple test installs. I haven't tried it on Fedora.

@jaredbusch You need Debian 8 currently. You can get it from here.
 https://cdimage.debian.org/cdimage/archive/

Debian 9 install.
Had someone look at the install on Debian 9.
In the install script debian/resource/config.sh set php_version=7

wget http://http.us.debian.org/debian/pool/main/o/openssl/libssl1.0.0_1.0.1t-1+deb8u6_amd64.deb
apt install ./libssl1.0.0_1.0.1t-1+deb8u6_amd64.deb

With this dependency change the FreeSWITCH package install should work.
Not a perfect solution however as the repo is still Jessie.

@JaredBusch

Actually I accidentally posted it to this thread it was meant for this one https://mangolassi.it/topic/18265/voip-provider-skyetel

My name in Mark J. Crane I'm the creator and lead developer of FusionPBX. Some of the code for FusionPBX was written before I found FreeSWITCH in early alpha before its 1.0 release. Which would make FusionPBX a little more than 10 years. I started the project on pfSense as the FreeSWITCH package and later moved it out to get a larger audience and a real database server.

FusionPBX install is now very easy on Debian 8 (preferred by FreeSWITCH developers). We also have a FreeBSD, CentOS, and Devuan install scripts. The install script ask no questions it just does the install and tells you a random password to login at the end. You can edit a resources/config.sh file that has all the defaults set in it if you want to preset usernames and passwords or change other defaults.

SLA - shared line appearance does work with FreeSWITCH and FusionPBX works great with Yealink and SPA phones.

In FusionPBX we also saw ghost calls which were fixed by changing the phones configuration to not accept un-authenticated calls.

The mention on security mod_xml_rpc is not even installed by default as we don't use it for anything. Also the install script adds a firewall but doesn't enable port 8787 this would be better to be accessed across a VPN for better security.

@black3dynamite It's failing because Debian 9 was just released and FreeSWITCH doesn't have a package repo for Debian 9 'stretch' yet. ClueCon is next week maybe they will share some information on it then.

@bigbear almost everything listed is native to freeswitch.

FreeSWITCH doesn't have hot desking, device provisioning, operator panel, and all the other features that it does have are configured with XML. What FreeSWITCH has is a good tool box to make it possible to make all of those features.

@bigbear Also fusion doesn’t load balance servers, it’s just a failover BDR, where opensips and Kamailio offer true redundancy.

Load balancing is literally distributing the load and this can be done using multiple tools including but not limited to OpenSIPs and Kamailio but because FusionPBX is domain based multi-tenant system that usually has multiple domains and therefore load can also be distributed with DNS SRV, Smart DNS, multiple outbound proxies and more.