Конфигуриране на IP телефонна централа за тестови...

download Конфигуриране на IP телефонна централа за тестови нужди

of 127

description

Инсталация и конфигурация на IP телефонна централа (Trixbox) за тестови нужди

Transcript of Конфигуриране на IP телефонна централа за тестови...

  • 5/22/2018 IP

    1/127

    [ IP

    ]

  • 5/22/2018 IP

    2/127

    IP 2

    .............................................................................................................................................. 4

    .................................................................................................................. 4

    ..................................................................................................... 4

    , ............................................................................................. 5

    .............................................................................................................................. 8

    Asterisk, ? ............................................................................................................................ 9

    Elastix .............................................................................................................................................. 9

    trixbox ........................................................................................................................................... 11

    .......................................................................................................................... 14

    ...................................................................................... 18

    FreePBX ............................................................................... 22

    G.729 G.723 ................................................................................................ 27

    Asterisk CLI ......................................................................................................... 29

    ........................................... 34

    Asterisk Manager........................................................................................... 34

    ARI .............................................................................. 36

    MySQL .............................................................................................................. 37

    root MySQL ............................................................................................... 38

    root ............................................................................... 40

    maint .............................................................................................. 41

    Web-Meetme .............................................................................. 41

    FOP.............................................................................................. 42

    ................................................................................... 43

    fail2ban ................................................................................................................. 44

    iptables................................................................................................. 48

    .............................................................................................................. 55

    PSTN SIP ............................................................................................................... 56

    GSM SIP .................................................................................................................... 64

    ITSP ..................................................................................................................................... 73

    .......................................................................................... 79

    Follow Me........................................................................................................... 84

  • 5/22/2018 IP

    3/127

    IP 3

    ...................................................................................... 86

    ................................................................................................................... 89

    ............................................ 91

    ............................................................................ 92

    ................................................................................... 93

    ..................................................................................................... 94

    CallerID...................................................................... 94

    ........................................................................................................ 95

    IVR ...................................................................................................................... 97

    .............................................................................................. 97

    .................................................................................... 101

    ................................................................ 101

    CallBack ............................................................................................................ 103

    ............................................................................................ 103

    DISA.................................................................................................................. 105

    (MOH) .......................................................................... 105

    PIN ........................................................................................ 106

    .......................................................................................... 107

    ....................................................................................... 107

    Backup ........................................................... 108

    ...................................................................... 109

    Call Detail Record................................................................................................................................. 111

    .................................................................................................................. 114

    HUD server + client .............................................................................................................................. 114

    web........................................................................... 117

    FOP ...................................................................................................................................................... 121

    Web-MeetMe ...................................................................................................................................... 122

    ........................................................................................................................................ 124

    .......................................................................................................................................... 125

    ..................................................................... 126

  • 5/22/2018 IP

    4/127

    IP 4

    , ,

    . ,

    ,

    , ,

    .

    IP

    . ,

    ,

    . ,

    , .

    , Voice over IP

    , .

    15 .. ,

    5 .

    ,

    - - ,

    PSTN GSM (), ,

    , callback, , Interactive

    Voice Response . ,

    , ,

    ,

    , ..

    - / + .

    VoIP

    .

    VoIP

    . ,

    - PBX ,

    . -VoIP

    ,

  • 5/22/2018 IP

    5/127

    IP 5

    Skype. messnger,

    .

    Skype target ,

    .

    ,

    SIP ,

    , . ,

    H.323,

    IP ,

    NAT (Network Address Translation). H.323

    /.

    ,

    , .

    .. ,

    , :

    Blink Linux, Mac OS, Windows GPL/Free software ICE, SIP, MSRP, RFB (VNC)

    Ekiga Linux, (Beta Windows

    support), OpenSolaris

    GPL/Free Software SIP, H.323, H.263,

    H.264/MPEG-4, AVC,

    STUN, Theora, Zeroconf

    Gizmo5 Linux, Mac OS, Windows,Win Mobile, Blackberry,

    Nokia, PDA Java

    Freeware/ClosedProprietary

    SIP, XMPP

    Linphone Linux, Windows GPL/Free software SIP

    Mirial Softphone Windows, Mac OS Closed Proprietary SIP, H.323, RTSP

    QuteCom Linux, Mac OS, Windows GPL/Free software SIP

    SightSpeed Mac OS, Windows Freeware/Closed

    Proprietary

    SIP, RTP, Proprietary P2P

    protocol

    SIP Communicator Linux, Mac OS, Windows LGPL/Free Software SIP/SIMPLE, XMPP

    Spikko Windows, Win Mobile,

    IPhone

    Freeware/Closed

    Proprietary

    SIP

    X-Lite X-PRO Linux, Mac OS, Windows,

    Windows Mobile

    Freeware/Closed

    Proprietary

    SIP, STUN, ICE

    Yahoo! Messenger Mac OS, Windows, Linux Freeware/Closed

    Proprietary

    SIP, RTP

    Zfone Linux, Mac OS, Windows Freeware/Viewable source

    Proprietary

    SIP, RTP

    Zoiper Linux, Mac OS, Windows Freeware/Closed

    Proprietary

    SIP, RTP

    1. SIP

  • 5/22/2018 IP

    6/127

    IP 6

    Zoiper Classic,

    G.729 29.45.

    ATA IP SIP,

    ,

    . -

    IP , Grandstream, -

    - Linksys. , Zoiper

    *:

    OS

    Windows Linux MAC OS X

    SIP + IAX / IAX 2 protocols

    STUN support

    STUN server per account

    TCP support with SIP

    TLS support with SIP

    TLS with SRTP support

    Available codecs - GSM, ulaw, alaw, speex, ilbc

    G.729 (optional, with Zoiper Biz only)

    T.38 Fax-receiving and Fax-sending capabilities

    DSCP support

    Echo cancellation

    Changeable number of lines (up to 6)

    Multilanguage support

    Native conferencing (SIP only)

    API

    Account import (XML)

    Selectable Strip dial characters option

    Automatic provisioning (XML)

    Callto URL protocol

    Incoming URL handling

    Automatic opening of incoming URL

    Open URL on different call events

    Auto answer

    Mail program plug-in: Outlook integration

  • 5/22/2018 IP

    7/127

    IP 7

    Mail program plug-in: Thunderbird integration

    Portable Zoiper with portable devices (USB

    sticks, flashcards, etc.)

    Blind call transfer

    Attended transfer

    Call forward

    Account password encryption

    Codec settings per account

    Automatic user registration

    Optional Automatic pop-up window for

    incoming call

    Hold function

    Support for multiple audio devices

    Adaptive Jitter Buffer

    Voice mail message information

    Access voice mail message with one button

    Command line dialing

    Number of accounts 2 accounts for Zoiper Free; Unlimited for Zoiper Biz

    Outband DTMF tones sending

    Call recording (Single file recordings)

    Custom ring tones

    Call logs

    Call history

    Address book

    Quick dial panel

    Always on top

    Minimize on start up

    Minimize to tray

    2. Zoiper

    * Zoiper

    Zfone, ,

    Zoiper,

    Zfone, ZRTP.

  • 5/22/2018 IP

    8/127

    IP 8

    ,

    PKI Diffie-

    Hellman .

    ,

    , PBX SIP.

    , ,

    . - :

    - 3CX Phone System

    - Avaya Aura

    - AS5300 Cisco

    - Blue.Box (http://www.2600hz.org, FreePBX)

    -

    Cisco Unified Communications Manager- FonicaPABX (http://www.fonicaprojects.com

    , FreePBX)

    - Snom One Plus

    - Mizutech VoIP Server

    - ClearSea

    - Communigate Pro

    - Elastix (http://www.elastix.org/, FreePBX)

    - FreeSwitch

    - Mysipswitch (SIP , )

    -

    Kamailio/OpenSIPS- Pbxnsip

    - PIAF /PBX in a Flash/ (http://pbxinaflash.com, FreePBX)

    - Revation LinkLive

    - SIP Express Router ( SIP )

    - sipX ECS IP PBX

    - TrixBox (http://trixbox.org, FreePBX)

    - Unison

    - vzRoom

    ,

    ,

    .

    ,

    Cisco

    .

    http://www.2600hz.org/http://www.2600hz.org/http://www.2600hz.org/http://www.fonicaprojects.com/http://www.fonicaprojects.com/http://www.fonicaprojects.com/http://www.elastix.org/http://www.elastix.org/http://www.elastix.org/http://pbxinaflash.com/http://pbxinaflash.com/http://pbxinaflash.com/http://trixbox.org/http://trixbox.org/http://trixbox.org/http://trixbox.org/http://pbxinaflash.com/http://www.elastix.org/http://www.fonicaprojects.com/http://www.2600hz.org/
  • 5/22/2018 IP

    9/127

    IP 9

    , .

    ,

    .

    SIP Elastix trixbox,

    Asterisk FreePBX.

    Asterisk, ?

    Asterisk ( . *) 1999. ,

    Digium, PBX

    . PBX, ,

    PSTN VoIP , , MOH,

    , IVR .

    ,

    Asterisk, C AGI (Asterisk GatewayInterface) , , stdin stdout

    TCP . Asterisk ,

    IP , VoIP, SIP, MGCP, H.323, Asterisk

    IAX2 (Inter-Asterisk Exchange), IP

    . VoIP ,

    ISDN SS7,

    .

    . Zaptel, Libpri, Libss7, chanss7, wanpipe

    .

    Linux, Asterisk NetBSD,

    OpenBSD, FreeBSD, Mac OS X Solaris. Microsoft Windows,

    AsteriskWin32.

    Asterisk PABX in a box ,

    .

    Elastix

    Elastix , .

  • 5/22/2018 IP

    10/127

    IP 10

    .1. Elastix

    Elastix :

    -

    - --

    -

    - Web

    -

    -

    - LCR (- )

    -

    - PBX

    - CID

    - CRM

    - ()

    - IVR

    -

    -

    -

    - Call parking

    - CDR

    -

    - ()

    - Queues

  • 5/22/2018 IP

    11/127

    IP 1

    -

    - (ring groups)

    -

    -

    - PIN

    - (DISA)

    - Callback

    - Bluetooth (chan_mobile)

    - , HylaFax

    - PDF

    - --

    -

    - SendFax web

    -

    -

    - ACL

    -

    - Backup web

    - PBX

    - click-to-dial

    - CRM , (vTigerCRM SugarCRM)

    - (IM) Openfire

    - ,

    - Web IM

    - Web

    -

    -

    Elastix , Call Center ,

    , CRM

    (Oracle, MS SQL, Mysql, Postgresql).

    GPLv2, . , Elastix ,

    , -

    trixbox

    2004. Asterisk@Home

    2006. trixbox CE Digium,

  • 5/22/2018 IP

    12/127

    IP 12

    Asterisk,

    .

    . Asterisk@Home :

    http://asteriskathome.sourceforge.net/handbook/ 100,000 , trixbox CE - IP PBX

    . trixbox,

    trixbox CE, trixbox PRO

    Fonality, .

    Elastix, trixbox , PBX ,

    :

    - CentOS 5, RedHat Linux

    -

    Apache web - PHP5

    - MySQL

    - Asterisk

    - FreePBX (http://www.freepbx.org)

    .2. ,

    http://asteriskathome.sourceforge.net/handbook/http://asteriskathome.sourceforge.net/handbook/http://www.freepbx.org/http://www.freepbx.org/http://www.freepbx.org/http://www.freepbx.org/http://asteriskathome.sourceforge.net/handbook/
  • 5/22/2018 IP

    13/127

    IP 13

    web ,

    . Trixbox CE

    Elastix, , ,

    A2Billing. Trixbox CE

    CDR, web , Web-

    MeetMe FOP (Flash Operations Panel ).

    , trixbox PRO ,

    PBXtra, , HUD Pro,

    .

    FXO, FXS, BRI PRI ,

    PC , . Digium, Sangoma, Rhino

    OpenVox. ,

    :

    http://hardware.redhat.com/

    firmware-

    tftp, MAC SIP ,

    IP :

    - Aastra

    - Cisco

    - Grandstream

    - Linksys

    -

    Polycom

    - Snom

    , PBX- 100

    ( 4T1). -

    trixbox ,

    ,

    (load balancing)

    . :

    - 8-24 :

    dual-core + 1Gb RAM

    - - 24-48 : Xeon ~ 2.0Ghz + 2Gb RAM + SATA RAID1

    (RAID5 )

    http://hardware.redhat.com/http://hardware.redhat.com/http://hardware.redhat.com/
  • 5/22/2018 IP

    14/127

    IP 14

    - 48-100 : Dual Xeon ~ 2.8-3.0Ghz + 4Gb RAM + SAS

    RAID1 2 trixbox- 24-48

    OEM :

    http://www.trixbox.org/wiki/OEM_Servers

    :

    http://fonality.com/trixbox/wiki/motherboard-list

    , :

    http://www.asteriskmotherboards.com/

    trixbox

    . .. LiveCD

    trixbox , , usb drive

    , . VmWare VirtualBox na Sun.

    , ,

    :

    http://www.fonality.com/trixbox/devblog/introducing-new-trixbox-ce-livecd

    VmWare VirtualBox,

    ISO Fonality,

    :

    http://www.fonality.com/trixbox/downloads

    :

    trixbox CE 2.8.0.4

    trixbox CE 2.6.2.3

    Asterisk. ,

    , ,

    http://www.trixbox.org/wiki/OEM_Servershttp://www.trixbox.org/wiki/OEM_Servershttp://fonality.com/trixbox/wiki/motherboard-listhttp://fonality.com/trixbox/wiki/motherboard-listhttp://www.asteriskmotherboards.com/http://www.asteriskmotherboards.com/http://www.fonality.com/trixbox/devblog/introducing-new-trixbox-ce-livecdhttp://www.fonality.com/trixbox/devblog/introducing-new-trixbox-ce-livecdhttp://www.fonality.com/trixbox/downloadshttp://www.fonality.com/trixbox/downloadshttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/downloadhttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/downloadhttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.6/trixbox-2.6.2.3.iso/downloadhttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.6/trixbox-2.6.2.3.iso/downloadhttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.6/trixbox-2.6.2.3.iso/downloadhttp://sourceforge.net/projects/asteriskathome/files/trixbox%20CE/trixbox%202.8/trixbox-2.8.0.4.iso/downloadhttp://www.fonality.com/trixbox/downloadshttp://www.fonality.com/trixbox/devblog/introducing-new-trixbox-ce-livecdhttp://www.asteriskmotherboards.com/http://fonality.com/trixbox/wiki/motherboard-listhttp://www.trixbox.org/wiki/OEM_Servers
  • 5/22/2018 IP

    15/127

    IP 15

    ,

    .. RAM ,

    VmWare VirtualBox appliance 768Mb.

    ,

    , VmWare appliance,

    ,

    . ,

    trixbox_2.6.1-vmware.zip, :

    ftp://ftp.sympad.net/pub/TrixBox/trixbox_2.6.1-vmware.zip

    ,

    VmWare player, Open vmx

    .

    .1.VmWare Player

    .

    ftp://ftp.sympad.net/pub/TrixBox/trixbox_2.6.1-vmware.zipftp://ftp.sympad.net/pub/TrixBox/trixbox_2.6.1-vmware.zipftp://ftp.sympad.net/pub/TrixBox/trixbox_2.6.1-vmware.zip
  • 5/22/2018 IP

    16/127

    IP 16

    .2. trixbox

    , ,

    , hudlite-server, ircd .

    IP ,

    DHCP VmWare.

    bridge , ,

    NAT . , Devices

    Network Adapters, Bridged.

    , root

    trixbox. , ifconfig MAC

    , HwAddr:

  • 5/22/2018 IP

    17/127

    IP 17

    . 3. trixbox

    MAC PBX ,

    IP , DHCP

    . trixbox

    192.168.50.108.

    , VmWare player,

    ( WinXP),

    VmWare , "%ProgramFiles%\VMware\VMware

    Player\vnetcfg.exe".

  • 5/22/2018 IP

    18/127

    IP 18

    . 4. VmWare

    , VMnet0 bridge-

    . IP trixbox, reboot.

    trixbox HTTP ,

    . 192.168.50.108,

    -.

  • 5/22/2018 IP

    19/127

    IP 19

    . 5. web

    , :

    - Voicemail and Recordings:

    - Web MeetMe:

    - FOP /Flash Operator Panel/: ,

    , .

    , switch,

    User mode. maint

    password.

  • 5/22/2018 IP

    20/127

    IP 20

    . 6.

    , PBX

    . - , :

    - System Status

    - Packages

    - PBX

    o

    PBX settingso Config File Editor

    o PBX Status

    o Endpoint Manager

    o Bulk Extensions

    o HUDlite Admin / /

    o CDR Report

    - System

    o phpMyAdmin / /

    o

    System Infoo System Maint

    o Network

    - Settings

    o Repositories

    o Registration

    o General Settings

  • 5/22/2018 IP

    21/127

    IP 2

    - Help

    o About trixbox

    o Training

    o Support

    ,

    Fonality,

    Settings/Registration Dont ask me to register again.

    PBX/General Settings,

    FreePBX. , FreePBX ,

    . ,

    , :

    Extension Recording Override:

    Disabled

    Call recording format:

    gsm

    Country Indications: Bulgaria

    24-hour format: yes

    Security Settings

    Allow Anonymous Inbound SIP Calls?: yes

    Settings/Repositories ,

    , .

    :

    - trixbox Stable

    - trixbox Addons

    Packages ,

    tbm-phpmyadmin hudlite-server,

    firmware- .

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    22/127

    IP 22

    FreePBX

    PBX/PBX Settings/Module Admin , ,

    :

    versionupgrade (2.4.0.2)

    phpagiconf (2.4.0)

    queues (2.4.0.6)

    phpinfo (2.4.0)

    javassh (2.4.0)

    languages (2.4.0.2)

    cidlookup (2.4.0.1)

    pbdirectory (2.4.0.2)

    vmblast (2.4.3.2)

    callforward (2.4.0)

    pinsets (2.4.0)

    miscapps (2.4.0.2)

    callback (2.4.0.1)

    voicemail (2.4.0.1)

    miscdests (2.4.0.2)

    asteriskinfo (2.4.0)

    daynight (2.4.0.3)

    announcement (2.4.0.1)

    logfiles (2.4.0)

    asterisk-cli (2.4.1)

    printextensions (2.4.1)

    manager (2.4.0)

    infoservices (2.4.0.1)

    callwaiting (2.4.0)

    findmefollow (2.4.14.2)

    dashboard (2.4.0.3)

    ringgroups (2.4.0.2)

    featurecodeadmin (2.4.0.2)

    music (2.4.0.3)

    blacklist (2.4.0.2)

    disa (2.4.0.4)

    phonebook (2.4.0.1)

    parking (2.4.0.6)

    paging (2.4.0.5)

    recordings (3.3.6.3)

    core (2.4.1.1)

    conferences (2.4.0.3)

    ivr (2.5.17)

  • 5/22/2018 IP

    23/127

    IP 23

    framework (2.4.1.0)

    timeconditions (2.4.4.3)

    donotdisturb (2.4.0)

    tbbackup (2.4.3)

    dictate (2.4.0)

    customappsreg (2.4.0.5)

    . 7. FreePBX

    .

    *: FreePBX

    . ,

    DISA,

    .

    PBX/PBX Settings 2.5 Upgrade Tool.

    FreePBX trixbox.

    , Module Admin,

    Check Online, FreePBX Framework Process .

    FreePBX Framework,

    ( ).

    Check Online,

    . Update All, Process

    .

  • 5/22/2018 IP

    24/127

    IP 24

    . 8. FreePBX

    FreePBX Framework - 2.9.0beta2.1.

    *: Asterisk DISA (.

    DTMF GSM , ..)

    Asterisk .

    ,

    , (

    RPM Zaptel).

    ** trixbox SSH ,

    , . , Windows

    Putty SSH :

    http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe

    root trixbox.

    :

    1. :

    http://the.earth.li/~sgtatham/putty/latest/x86/putty.exehttp://the.earth.li/~sgtatham/putty/latest/x86/putty.exehttp://the.earth.li/~sgtatham/putty/latest/x86/putty.exe
  • 5/22/2018 IP

    25/127

    IP 25

    [trixbox1.localdomain ~]# wget http://download.fedora.redhat.com/pub/epel/5/i386/zaptel-

    1.4.12.1-1.el5.i386.rpm

    2. no dependencies:

    [trixbox1.localdomain ~]# rpm -Uvh --nodeps zaptel-1.4.12.1-1.el5.i386.rpm

    3. :

    [trixbox1.localdomain ~]# wget

    ftp://ftp.pbone.net/mirror/yum.trixbox.org/centos/5/RPMS/zaptel-1.4.12.9-1_trixbox.i686.rpm

    4. no dependencies:

    [trixbox1.localdomain ~]# rpm -Uvh --nodeps zaptel-1.4.12.9-1_trixbox.i686.rpm

    5. Asterisk:

    [trixbox1.localdomain ~]# yum update asterisk

    6. Asterisk :

    [trixbox1.localdomain ~]# amportal restart

    * ,

    reboot.

    , Midnight Commander Nano:

    [trixbox1.localdomain ~]# yum install mc nano

    service memcached,

    :

    [trixbox1.localdomain ~]# yum install memcached

    **: CentOS

    :

    [trixbox1.localdomain ~]# yum updateexclude=zaptel* --exclude=asterisk* --exclude=libpri* --

    exclude=web-meetme* --exclude=memcached* --exclude=libevent* --exclude=nfs-utils*

    , .

    ftp://ftp.pbone.net/mirror/yum.trixbox.org/centos/5/RPMS/zaptel-1.4.12.9-1_trixbox.i686.rpmftp://ftp.pbone.net/mirror/yum.trixbox.org/centos/5/RPMS/zaptel-1.4.12.9-1_trixbox.i686.rpmftp://ftp.pbone.net/mirror/yum.trixbox.org/centos/5/RPMS/zaptel-1.4.12.9-1_trixbox.i686.rpm
  • 5/22/2018 IP

    26/127

    IP 26

    web , update .

    - :

    /var/www/html/maint/skin/default../

    ***: , trixbox

    .

    . 9. CentOS

    Packages web ,

    /.

    yum, :

    [trixbox1.localdomain ~]# yum install tbm-phpmyadmin *speex*

  • 5/22/2018 IP

    27/127

    IP 27

    G.729 G.723

    trixbox G.729 G.723.

    , speex ,

    . Asterisk, CLI Asterisk, :

    [trixbox1.localdomain ~]# asteriskr

    ( vvv debug)

    Asterisk CLI, :

    trixbox1*CLI> show codecs

    .

    G.729 CS-ACELP (Conjugate-Structure Algebraic-Code-Excited

    Linear Predictive) . , G.729 -

    / - ,

    8kbps,

    .

    G.729: G.729 Annex A, G.729B, G.729AB, G.729D (6.4kbps) G.729E

    (11.8kbps).

    G.729 Digium, / $10:

    http://www.digium.com/en/products/g729codec.php

    , ,

    ,

    . , ,

    :

    1. Asterisk :

    [trixbox1.localdomain ~]# asterisk -v |less

    Asterisk 1.4.22-4 RPM by [email protected], Copyright (C) 1999 - 2008 Digium,

    Inc. and others.

    2. :

    [trixbox1.localdomain ~]# cat /proc/cpuinfo

    processor : 0

    http://www.digium.com/en/products/g729codec.phphttp://www.digium.com/en/products/g729codec.phphttp://www.digium.com/en/products/g729codec.php
  • 5/22/2018 IP

    28/127

    IP 28

    vendor_id : GenuineIntel

    cpu family : 6

    model : 15

    model name : Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz

    stepping : 13

    cpu MHz : 1662.682cache size : 2048 KB

    fdiv_bug : no

    hlt_bug : no

    f00f_bug : no

    coma_bug : no

    fpu : yes

    fpu_exception : yes

    cpuid level : 10

    wp : yes

    flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36

    clflush dts acpi mmx fxsr sse sse2 ss nx constant_tsc up arch_perfmon pebs bts pni ssse3

    bogomips : 3720.61

    clflush size : 64

    3. http://asterisk.hosting.lv/ trixbox

    , :

    [trixbox1.localdomain ~]# cd /usr/lib/asterisk/modules

    [trixbox1.localdomain ~]# wgethttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-

    glibc-core2.so

    [trixbox1.localdomain ~]# wgethttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.so

    4. Asterisk CLI :

    [trixbox1.localdomain ~]# asteriskr

    trixbox1*CLI> load codec_g729-ast14-gcc4-glibc-core2.so

    trixbox1*CLI> load codec_g723-ast14-gcc4-glibc-core2.so

    , :

    http://asterisk.hosting.lv/http://asterisk.hosting.lv/http://asterisk.hosting.lv/http://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4-glibc-core2.sohttp://asterisk.hosting.lv/
  • 5/22/2018 IP

    29/127

    IP 29

    . 10.

    Asterisk quit.

    5. web

    trixbox (PBX/Config File Editor), sip_general_custom.conf iax_general_custom.conf:

    [trixbox1.localdomain ~]# mcedit /etc/asterisk/sip_general_custom.conf

    [trixbox1.localdomain ~]# mcedit /etc/asterisk/iax_general_custom.conf

    :

    allow=g729

    allow=g723

    Sip_general_custom.conf Iax_general_custom.conf

    ,

    SIP IAX .

    , ,

    :

    [trixbox1.localdomain ~]# asteriskr

    trixbox1*CLI> sip show channels

    Asterisk CLI

    Asterisk CLI , - :

    trixbox1*CLI> reload

  • 5/22/2018 IP

    30/127

    IP 30

    * Asterisk

    trixbox1*CLI> sip history

    SIP History Recording Enabled (use 'sip show history')

    *

    sip show history

    trixbox1*CLI> sip show settings

    trixbox1*CLI>

    Global Settings:

    ----------------

    SIP Port: 5060

    Bindaddress: 0.0.0.0

    Videosupport: No

    AutoCreatePeer: No

    Allow unknown access: Yes

    Allow subscriptions: Yes

    Allow overlap dialing: Yes

    Promsic. redir: No

    SIP domain support: No

    Call to non-local dom.: Yes

    URI user is phone no: No

    Our auth realm asterisk

    Realm. auth: No

    Always auth rejects: Yes

    Call limit peers only: Yes

    Direct RTP setup: No

  • 5/22/2018 IP

    31/127

    IP 3

    User Agent: FPBX-2.9.0beta2(1.4.22)

    MWI checking interval: 10 secs

    Reg. context: (not set)

    Caller ID: Unknown

    From: Domain:

    Record SIP history: On

    Call Events: Off

    IP ToS SIP: CS3

    IP ToS RTP audio: EF

    IP ToS RTP video: AF41

    T38 fax pt UDPTL: No

    RFC2833 Compensation: No

    SIP realtime: Disabled

    trixbox1*CLI>

    Global Signalling Settings:

    ---------------------------

    Codecs: 0x10f (g723|gsm|ulaw|alaw|g729)

    Codec Order: g729:20,g723:30,gsm:20,ulaw:20,alaw:20

    T1 minimum: 100

    Relax DTMF: Yes

    Compact SIP headers: No

    RTP Keepalive: 0 (Disabled)

    RTP Timeout: 0 (Disabled)

    RTP Hold Timeout: 0 (Disabled)

    MWI NOTIFY mime type: application/simple-message-summary

    DNS SRV lookup: Yes

  • 5/22/2018 IP

    32/127

    IP 32

    Pedantic SIP support: No

    Reg. min duration 60 secs

    Reg. max duration: 3600 secs

    Reg. default duration: 120 secs

    Outbound reg. timeout: 20 secs

    Outbound reg. attempts: 0

    Notify ringing state: Yes

    Notify hold state: Yes

    SIP Transfer mode: open

    Max Call Bitrate: 384 kbps

    Auto-Framing: No

    trixbox1*CLI>

    Default Settings:

    -----------------

    Context: from-sip-external

    Nat: RFC3581

    DTMF: rfc2833

    Qualify: 0

    Use ClientCode: No

    Progress inband: Yes

    Language: (Defaults to English)

    MOH Interpret: default

    MOH Suggest:

    Voice Mail Extension: *97

    * SIP .

    trixbox1*CLI> sip debug

  • 5/22/2018 IP

    33/127

    IP 33

    SIP Debugging enabled

    * debugging ,

    trixbox1*CLI> sip set debug off

    SIP Debugging Disabled

    * debugging

    trixbox1*CLI> sip show users

    Username Secret Def.Context ACL NAT

    6667 b** from-internal No Always

    6666 g***** from-internal No Always

    4918683 y****** from-pstn No RFC3581

    4918655 **h****u from-pstn No RFC3581

    3542755 **2***s from-pstn No RFC3581

    204 2041 from-internal No RFC3581

    203 2031 from-internal No Always

    202 2021 from-internal No Always

    201 2011 from-internal No Always

    200 2001 from-internal No Always

    1291017 4****** from-pstn No RFC3581

    1112 te****** from-internal Yes RFC3581

    1111 sofstroi from-internal No RFC3581

    1081566 ***31*** from-pstn No RFC3581

    * ITSP

  • 5/22/2018 IP

    34/127

    IP 34

    ,

    , PBX/PBX Settings.

    . , PHP

    64Mb 100Mb /etc/php.ini.

    memory_limit = 100M

    apachectl restart.

    . ,

    IP .

    FreePBX , :

    8 extensions/trunks have weak secretsWarning: The use of weak SIP/IAX passwords can compromise this system resulting intoll theft of your telephony service. You should change the reported devices and trunksto use strong secrets.

    Extension: 200 / Secret less than 6 digitsExtension: 201 / Secret less than 6 digitsExtension: 202 / Secret less than 6 digits

    Extension: 203 / Secret less than 6 digitsExtension: 204 / Secret less than 6 digits

    ,

    200 204, . -

    ,

    brute-force .

    Asterisk Manager

    PBX/PBX Settings,

    :

    Default Asterisk Manager Password Used

  • 5/22/2018 IP

    35/127

    IP 35

    Asterisk

    , :

    /etc/asterisk/manager.conf

    /etc/amportal.conf

    amp111. .

    /etc/asterisk/manager.conf :

    secret = amp111

    /etc/amportal.conf :

    AMPMGRPASS=amp111

    , - FreePBX MySQL. , web

    phpMyAdmin

    System/phpMyAdmin. asterisk

    freepbx_settings. keyword AMPMGRPASS,

    value defaultval .

    . 11.

    phpMyAdmin

  • 5/22/2018 IP

    36/127

    IP 36

    amp111

    :

    /etc/asterisk/extensions_additional.conf

    /etc/asterisk/phpagi.conf

    /var/www/html/admin/libraries/freepbx_conf.class.php

    /var/www/html/admin/modules/framework/libfreepbx.install.php

    /var/www/html/admin/modules/framework/htdocs/admin/libraries/freepbx_conf.class.php

    /var/www/html/framework/modules/trixbox/libraries/Trixpbx.php

    Asterisk :

    [trixbox1.localdomain etc]# amportal restart

    ARI

    PBX/PBX Settings,

    :

    Default ARI Admin password Used

    ARI :

    /var/www/html/recordings/includes/main.conf.php

    /etc/amportal.conf

    - FreePBX, MySQL,

    phpMyAdmin asterisk freepbx_settings

    keyword ARI_ADMIN_PASSWORD, value

    defaultval .

  • 5/22/2018 IP

    37/127

    IP 37

    . 12. ARI phpMyAdmin

    , , :

    /var /www/html/admin/libraries/ freepbx_conf.class.php

    /var/www/html/admin/modules/framework/var libfreepbx.install.php

    /var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php

    MySQL

    MySQL,

    /etc/amportal.conf

    amp109. , AMPDBPASS=.

    ,

    /etc/asterisk/cdr_mysql.conf

    /etc/asterisk/res_mysql.conf ( )

    ,

    :

    /etc/freepbx.conf ( )

  • 5/22/2018 IP

    38/127

    IP 38

    /etc/asterisk/extensions_additional.conf

    /var /www/html/maint/modules/cdrreport/config/database.php

    /var /www/html/admin/libraries/freepbx_conf.class.php

    /var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php

    /var /www/html/framework/system/config/database.php

    /var /www/html/framework/modules/trixbox/libraries/Trixpbx.php

    asteriskuser

    MySQL. phpMyAdmin

    System/phpMyAdmin. Server: localhost, , , Privileges, Edit

    Privileges, asteriskuser. Change password

    .

    MySQL, - reboot

    .

    root MySQL

    root MySQL - ,

    - PBX- .

    , .

    trixbox, . , root

    MySQL

    , root,

    localhost,

    CentOS.

    passw0rd.

    :

    [trixbox1.localdomain etc]# mysqladmin -u root -p'passw0rd' password 'novapassXXX'

    :

    /etc/asterisk/cbmysql.conf

  • 5/22/2018 IP

    39/127

    IP 39

    /var/www/html/maint/modules/phpmyadmin/config.inc.php

    /var/www/html/web-meetme/trixbox-files/cbmysql.conf

    /var/www/html/web-meetme/lib/defines.php

    /var/www/html/web-meetme/lib/database.php

  • 5/22/2018 IP

    40/127

    IP 40

    /var/www/html/aastra/asterisk/sugarCRM.php

    /var/www/html/xmlservices/include/xmlservices_libs.php

    , MySQL root

    , localhost.localdomain. phpMyAdmin,

    Settings/phpMyAdmin web ,

    -.

    . 13. root ,

    phpMyAdmin

    root

    root

    - . CentOS

    :

    [trixbox1.localdomain ~]# passwd

    Changing password for user root.

    New UNIX password:

    BAD PASSWORD: it is based on a dictionary word

    Retype new UNIX password:

    passwd: all authentication tokens updated successfully.

  • 5/22/2018 IP

    41/127

    IP 4

    , .

    maint

    :

    [trixbox1.localdomain ~]# passwd-maint

    -------------------------------------------

    Set password for AMP web GUI and maint GUI

    User: maint

    -------------------------------------------

    New password:

    Re-type new password:

    Updating password for user maint

    maint .

    Web-Meetme

    - ,

    [trixbox1.localdomain ~]# passwd-meetme

    - ,

    HTTP. trixbox, .

    , Web MeetMe. ,

    :

    User: wmm@localhost

    Password: wmmpw

    ,

    / .

    , .

  • 5/22/2018 IP

    42/127

    IP 42

    . 14. Web-MeetMe

    FOP

    - :

    /etc/amportal.conf

    # Default Value: passw0rd

    FOPPASSWORD=passw0rd

    , ,

    - :

    /var/www/html/admin/libraries/freepbx_conf.class.php

    /var /www/html/admin/modules/framework/ libfreepbx.install.php

    /var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php

    /var /www/html/framework/modules/trixbox/libraries/ Trixpbx.php

    web , System/phpMyAdmin

    asterisk, freepbx_settings , FOPPASSWORD keyword.

  • 5/22/2018 IP

    43/127

    IP 43

    . 15. FOP phpMyAdmin

    , .

    , brute-force

    SIP .

    HTTP, PBX/Config File Editor.

    . 16. Asterisk web

    sip_general_custom.conf :

  • 5/22/2018 IP

    44/127

    IP 44

    alwaysauthreject=yes

    update , Asterisk,

    :

    [trixbox1.localdomain ~]# asteriskr

    trixbox1*CLI> reload

    , .

    fail2ban

    (SIP brute-force)

    Python fail2ban.

    :

    http://www.necits.com/misc/fail2ban.pdf

    SourceForge, :

    http://sourceforge.net/projects/fail2ban/

    1.

    :

    [trixbox1.localdomain ~]# cd /usr/src

    [trixbox1.localdomain ~]# wgethttp://garr.dl.sourceforge.net/project/fail2ban/fail2ban-

    stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2

    [trixbox1.localdomain src]# tar -jxf fail2ban-0.8.4.tar.bz2

    [trixbox1.localdomain src]# cd fail2ban-0.8.4

    [trixbox1.localdomain fail2ban-0.8.4]# python setup.py install

    [trixbox1.localdomain fail2ban-0.8.4]# cp files/redhat-initd /etc/init.d/fail2ban

    [trixbox1.localdomain fail2ban-0.8.4]# chmod 755 /etc/init.d/fail2ban

    2. fail2ban: ,

    Asterisk.

    http://www.necits.com/misc/fail2ban.pdfhttp://www.necits.com/misc/fail2ban.pdfhttp://sourceforge.net/projects/fail2ban/http://sourceforge.net/projects/fail2ban/http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://garr.dl.sourceforge.net/project/fail2ban/fail2ban-stable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2http://sourceforge.net/projects/fail2ban/http://www.necits.com/misc/fail2ban.pdf
  • 5/22/2018 IP

    45/127

    IP 45

    [trixbox1.localdomain fail2ban-0.8.4]# cd /etc/fail2ban/filter.d

    [trixbox1.localdomain filter.d]# touch asterisk.conf

    /etc/fail2ban/filter.d/asterisk.conf (.

    nano mcedit, Midnight Commander),

    :

    [trixbox1.localdomain filter.d]# nano /etc/fail2ban/filter.d/asterisk.conf

    # Fail2Ban configuration file

    #

    #

    # $Revision: 250 $

    #

    [INCLUDES]

    # Read common prefixes. If any customizations available -- read them from

    # common.local

    #before = common.conf

    [Definition]

    #_daemon = asterisk

    # Option: failregex

    # Notes.: regex to match the password failures messages in the logfile. The

    # host must be matched by a group named "host". The tag "" can

    # be used for standard IP/hostname matching and is only an alias for

    # (?:::f{4,6}:)?(?P\S+)

    # Values: TEXT

    #

    failregex = NOTICE.* .*: Registration from '.*' failed for '' - Wrong password

    NOTICE.* .*: Registration from '.*' failed for '' - No matching peer found

    NOTICE.* .*: Registration from '.*' failed for '' - Username/auth name mismatch

  • 5/22/2018 IP

    46/127

    IP 46

    NOTICE.* failed to authenticate as '.*'$

    NOTICE.* .*: No registration for peer '.*' (from )

    NOTICE.* .*: Host failed MD5 authentication for '.*' (.*)

    # Option: ignoreregex

    # Notes.: regex to ignore. If this regex matches, the line is ignored.

    # Values: TEXT

    #

    ignoreregex =

    *: , .

    /etc/fail2ban/jail.conf,

    IP 3 (sendmail-whois

    email ,

    ):

    [trixbox1.localdomain filter.d]# nano /etc/fail2ban/jail.conf

    [asterisk-iptables]

    enabled = true

    filter = asterisk

    action = iptables-allports[name=ASTERISK, protocol=all]

    sendmail-whois[name=ASTERISK, dest= root, sender=fail2ban@localhost]

    logpath = /var/log/asterisk/full

    #logpath = /var/log/messages

    maxretry = 5

    bantime = 259200

    ( /var/log/messages )

  • 5/22/2018 IP

    47/127

    IP 47

    *: IP , ,

    /etc/fail2ban/jail.conf, [DEFAULT] (

    ):

    ignoreip = 127.0.0.1 192.168.50.104 192.168.50.101

    , iptables ssh,

    http, ftp.

    [ssh-iptables]

    enabled = enable

    Asterisk fail2ban.

    [trixbox1.localdomain fail2ban-0.8.4]# nano /etc/asterisk/logger.conf

    :

    [general]

    dateformat=%F %

    [logfiles]

    syslog.local0 => notice

    Asterisk logger :

    [trixbox1.localdomain fail2ban-0.8.4]# asterisk -rx "logger reload"

    [trixbox1.localdomain share]# /etc/init.d/iptables start

    [trixbox1.localdomain share]# /etc/init.d/fail2ban start

    Starting fail2ban: [ OK ]

    [trixbox1.localdomain share]# chkconfig iptables on

    [trixbox1.localdomain share]# chkconfig fail2ban on

    *: fail2ban-server .

    :

    [trixbox1.localdomain fail2ban]# /etc/init.d/fail2ban restart

  • 5/22/2018 IP

    48/127

    IP 48

    iptables

    :

    [trixbox1.localdomain fail2ban]# netstat -na

    Active Internet connections (servers and established)

    Proto Recv-Q Send-Q Local Address Foreign Address State

    tcp 0 0 0.0.0.0:6600 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN

    tcp 0 0 127.0.0.1:11211 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:5038 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:852 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN

    tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:4445 0.0.0.0:* LISTEN

    tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN

    tcp 0 0 127.0.0.1:52889 127.0.0.1:5038 ESTABLISHED

    tcp 0 0 127.0.0.1:52887 127.0.0.1:5038 ESTABLISHED

    tcp 0 0 127.0.0.1:36340 127.0.0.1:6600 ESTABLISHED

    tcp 0 0 127.0.0.1:5038 127.0.0.1:52887 ESTABLISHED

    tcp 0 0 127.0.0.1:5038 127.0.0.1:52889 ESTABLISHED

    tcp 0 0 127.0.0.1:6600 127.0.0.1:36340 ESTABLISHED

    tcp 0 0 :::80 :::* LISTEN

    tcp 0 0 :::22 :::* LISTEN

    tcp 0 0 :::443 :::* LISTEN

    tcp 0 52 ::ffff:192.168.50.108:22 ::ffff:192.168.50.104:55417 ESTABLISHED

  • 5/22/2018 IP

    49/127

    IP 49

    udp 0 0 192.168.50.108:137 0.0.0.0:*

    udp 0 0 0.0.0.0:137 0.0.0.0:*

    udp 0 0 192.168.50.108:138 0.0.0.0:*

    udp 0 0 0.0.0.0:138 0.0.0.0:*

    udp 0 0 0.0.0.0:52789 0.0.0.0:*

    udp 0 0 0.0.0.0:5060 0.0.0.0:*

    udp 0 0 0.0.0.0:68 0.0.0.0:*

    udp 0 0 0.0.0.0:69 0.0.0.0:*

    udp 0 0 0.0.0.0:44365 0.0.0.0:*

    udp 0 0 0.0.0.0:846 0.0.0.0:*

    udp 0 0 0.0.0.0:849 0.0.0.0:*

    udp 0 0 0.0.0.0:4569 0.0.0.0:*

    udp 0 0 0.0.0.0:5353 0.0.0.0:*

    udp 0 0 0.0.0.0:111 0.0.0.0:*

    udp 0 0 192.168.50.108:123 0.0.0.0:*

    udp 0 0 127.0.0.1:123 0.0.0.0:*

    udp 0 0 0.0.0.0:123 0.0.0.0:*

    udp 0 0 fe80::20c:29ff:fea8:123 :::*

    udp 0 0 ::1:123 :::*

    udp 0 0 :::123 :::*

    ( netstat -

    plant)

    , TCP 6600(HUDserver), 3306 (MySQL), 139(NetBIOS/Samba), 111 (portmap), 852 (rpc.statd), 21 (FTP), 4445 (FOP2), 445 (Samba), 80

    (HTTP), 22 (SSH), 443 (HTTPS), UDP 137 (NetBIOS/Samba), 138 (NetBIOS/Samba),

    52789 (rtp), 68 (BootPC), 69 (TFTP), 44365, 846 (rpc), 849 (rpc), 4569 (IAX), 5353 (mDNS), 111

    (SunRPC), 123 (NTP) .

  • 5/22/2018 IP

    50/127

    IP 50

    NAT

    IP ,

    :

    *TCP 2527 (MGCP)

    *TCP 2727 (MGCP)

    *TCP 6600 (HUDserver)

    TCP 4445 (FOP, /var/www/html/panel/op_server.cfg, ;listen_port=)

    *TCP 22 (SSH, /etc/ssh/sshd_config)

    UDP 5060-5061 (SIP)

    UDP 10,000 - 20,000 (RTP)

    *UDP 4569 (IAX)

    *UDP 2427 (MGCP)

    *UDP 2727 (MGCP)

    UDP 68 (BootPC) -

    UDP 69 (TFTP) - firmware

    UDP 123 (NTP) -

    / apache web :

    /etc/httpd/conf/httpd.conf Listen 80 #Listen 80

    /etc/httpd/conf.d/ssl.conf Listen 443 Listen XXXXX

    /

    , paste-

    :

    MY_IP="192.168.50.108"

    IPT="/sbin/iptables"

  • 5/22/2018 IP

    51/127

    IP 5

    $IPT -F

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 21 -j DROP

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 111 -j DROP

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 139 -j DROP

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 445 -j DROP

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 852 -j DROP

    $IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 3306 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 111 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 137 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 138 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 846 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 849 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 4569 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 5353 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 44365 -j DROP

    $IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 52789 -j DROP

    $IPT -I INPUT -s 127.0.0.0/24 -j ACCEPT

    /etc/init.d/iptables save

    ,

    , paste- ,

    :

    #!/bin/bash

    LO_IFACE="lo"

    INET_IP="192.168.50.108"

    SSH=22

  • 5/22/2018 IP

    52/127

    IP 52

    DNS=53

    BOOTPC=68

    TFTP=69

    WEB=80

    NTP=123

    SSL_WEB=443

    FOP=4445

    IAX2=4569

    SIP=5060

    SIPS=5061

    HUD=6600

    MGCP1=2427

    MGCP2=2727

    RTP=10000:20000

    IPT="/sbin/iptables"

    $IPT -F

    $IPT -A INPUT -p ALL -i $LO_IFACE -j ACCEPT

    for port in $SSL_WEB $SSH $IAX2 $WEB $FOP $HUD $MGCP1 $MGCP2

    do

    $IPT -A INPUT -p TCP -d $INET_IP --destination-port $port -j ACCEPT

    done

    for port in $DNS $BOOTPC $TFTP $NTP $IAX2 $SIP $MGCP1 $MGCP2 $RTP $SIPS

    do

    $IPT -A INPUT -p udp -d $INET_IP --destination-port $port -j ACCEPT

    done

  • 5/22/2018 IP

    53/127

    IP 53

    $IPT -A INPUT -p tcp -m tcp -d $INET_IP -j DROP

    /etc/init.d/iptables save

    iptables :

    [trixbox1.localdomain ~]# iptablesnvL

    ,

    SIP , fail2ban :

    / :

    [trixbox1.localdomain ~]# nano /usr/local/bin/check_sip_attack

    paste-, Ctrl+O nano, Enter

    Ctrl+X

    crontab-, 5 :

    [trixbox1.localdomain ~]# nano /var/spool/cron/root

    Paste- :

    01-59/2 * * * * /usr/local/bin/check_sip_attack Ctrl+O, Enter, Ctrl+X

    [trixbox1.localdomain ~]# killall -HUP crond

    /

    :

    #####################################################

    #!/bin/bash#crontab -l# in Crontab:#01-59/2 * * * * /usr/local/bin/check_sip_attack

  • 5/22/2018 IP

    54/127

    IP 54

    PATH=${PATH}:/usr/sbinBINDIR=`dirname $0`; echo $BINDIR | grep \^\/ > /dev/null ||BINDIR=`pwd`/`dirname $0`arch=`uname -m`-`uname -s`mach=`hostname`

    # echo BINDIR= ${BINDIR}cd /var/log/asterisklog=fullif [ ! -r ${log} ]; thenprintf could not read error file (${log})\nelsestart=`grep -n -e CRON\:\ start ${log} | tail -n -1 | sed s/\:/\ /g | awk{print $1}`stop=`grep -n -e CRON\:\ stop ${log} | tail -n -1 | sed s/\:/\ /g | awk{print $1}`if [ "$start" = "" ]; then start=0; fiif [ "$stop" = "" ]; then stop=0; fiif [ "$start" -le "$stop" ]; thenerror=`tail -n +${stop} ${log} | grep -i Registration | grep -i Failed | tail -n +1`if [ \! \( "x$error" = "x" \) ]; thenprintf \n\nCRON: start sending info `date`\n\n >> ${log}ccc=`printf %s $error | wc -l | awk {print $1}`if [ $ccc -gt 0 ]; thenprintf EXCERPT FROM ASTERISK LOG FILE ${log}:\n\n%s\n\nDONE.\n\n

    $errorprintf %s $error > /tmp/sipappatck.tmpfor ip in `cat /tmp/sipappatck.tmp | awk {print $11} | sort | uniq | seds/\//g` ; doecho iptables -I INPUT -s $ip -j DROP/sbin/iptables -I INPUT -s $ip -j DROPdonefiprintf \n\nCRON: stop info sent `date`\n\n >> ${log}fififi

    exit 0

    # end

    #####################################################

  • 5/22/2018 IP

    55/127

    IP 55

    trixbox

    , . FreePBX (

    Asterisk,

    Tools), - -

    , :

    Extensions

    Fax Configuration

    Feature Codes

    Outbound Routes Trunks

    Inbound Routes

    Announcements

    Blacklist

    CallerID Lookup Sources

    Directory

    Follow Me

    IVR

    Queues Ring Groups

    Time Conditions Time Groups

    Callback

    Conferences

    DISA

    Misc Applications Misc Destinations

    Music On Hold

    PIN Sets

    System Recordings

    VoiceMail Blasting

    Asterisk SIP Settings

    End Point Configuration Advanced Settings

    Asterisk Logfiles

    Asterisk Info

  • 5/22/2018 IP

    56/127

    IP 56

    Asterisk Phonebook

    Backup & Restore

    Print Extensions

    Route Congestion Messages

    Customer DB Inventory

    PSTN SIP

    PSTN , SPA-3102

    Linksys, 1FXS 1FXO . FXO

    PBX-, SIP .

    . 17. Linksys SPA-3102 FXS/FXO ATA

    , .

    SPA-3102 , IP

    , -.

  • 5/22/2018 IP

    57/127

    IP 57

    . 18. SPA-3102

    web Admin login

    advanced (, ). ,

    Voice/PSTN Line.

    :

    Line Enable: yes NAT Settings

    NAT Mapping Enable: no NAT Keep Alive Enable:yes

    NAT Keep Alive Msg: $NOTIFY NAT Keep Alive Dest:$PROXY

    , PBX-

    Nat Mapping: no.

    SIP Settings

    SIP Transport: UDP SIP Port:5061

    SIP 100REL Enable: no EXT SIP Port:

    Proxy and Registration

  • 5/22/2018 IP

    58/127

    IP 58

    Proxy: 192.168.50.108

    Outbound Proxy: 192.168.50.108

    Use Outbound Proxy: no Use OB Proxy In Dialog:yes

    Register: yes

    Make Call Without Reg: yes

    Register Expires: 3600 Ans Call Without Reg:yes

    Use DNS SRV: no DNS SRV Auto Prefix:no

    IP PBX-, Outbound Proxy.SIP

    5061, DNS SRV .

    Subscriber Information

    Display Name: BTC Line User ID:6667

    Password: ************* Use Auth ID:no

    Auth ID: 6667 , user ID, Auth ID.

    Audio Configuration

    Preferred Codec:G711a

    Silence Supp Enable: no

    Use Pref Codec Only: no Echo Canc Enable:yes

    G729a Enable: yes Echo Canc Adapt Enable:yes

    G723 Enable: yes Echo Supp Enable:yes

    G726-16 Enable: yes FAX CED Detect Enable:yes

    G726-24 Enable: yes FAX CNG Detect Enable:yes

    G726-32 Enable: yes FAX Passthru Codec:G711u

    G726-40 Enable: yes FAX Codec Symmetric:yes

    DTMF Process INFO: yes FAX Passthru Method:NSE

    DTMF Process AVT: yes DTMF Tx Method:INFO

    DTMF Tx Mode: Strict DTMF Tx Strict Hold OffTime:

    40

    Release UnusedCodec:

    yes FAX Process NSE:

    yes

    Symmetric RTP: yes FAX Disable ECAN:no

    . FAX

    G711a. DTMF SIP INFO.

    VoIP-To-PSTN Gateway Setup

  • 5/22/2018 IP

    59/127

    IP 59

    VoIP-To-PSTN GatewayEnable:

    yes

    VoIP Caller AuthMethod:

    none

    VoIP PIN Max Retry:3

    One Stage Dialing: yes

    Line 1 VoIP Caller DP: 1 VoIP Caller DefaultDP:1

    Line 1 Fallback DP: none VoIP-To-PSTN, Caller Auth none,

    pin max retry 3, one stage dialing yes.

    PSTN-To-VoIP Gateway Setup

    PSTN-To-VoIP GatewayEnable:

    yes

    PSTN Caller AuthMethod:

    none

    PSTN Ring Thru Line 1:no

    PSTN PIN Max Retry:

    3

    PSTN CID For VoIP CID: yes PSTN CID NumberPrefix:

    PSTN Caller Default DP: 1 Off Hook While CallingVoIP:

    no

    Line 1 Signal Hook Flash ToPSTN:

    Disabled

    PSTN CID NamePrefix:

    PSTN-To-VoIP yes Caller

    Auth none.

    FXO Timer Values (sec)

    VoIP Answer Delay: 0 VoIP PIN Digit Timeout:10

    PSTN Answer Delay: 3 PSTN PIN Digit Timeout:10

    FXO 3 PSTN Answer Delay.

  • 5/22/2018 IP

    60/127

    IP 60

    trixbox :

    . 19.

    PBX/PBX Settings/Trunks Add SIP Trunk. ,

    CallerID , 1,

    ( -) ,

    XXXXXXXXXXX. - FreePBX,

    83XXXXXXXXXXXXX.

    BTC_linksys. peer- :

    disallow=all

    allow=alaw&g729&g723

    canreinvite=no

    context=from-trunk

    dtmfmode=info

    host=dynamic

    incominglimit=1

    nat=never

  • 5/22/2018 IP

    61/127

    IP 6

    port=5061

    qualify=yes

    secret=btc111

    type=friend

    username=6667

    fromuser=6667

    USER contextUSER details .

    ___________________________________________________________________

    *: - SIP :

    Outgoing Settings:

    PEER Details:

    context=from-trunk

    host=PROVIDER.HOSTNAME

    qualify=yes

    nat=no

    type=peer

    insecure=invite

    disallow=all

    allow=g729&g723&alaw

    username=USERNAME

    secret=SECRET

    Register String:

    USERNAME:[email protected]/DID

    ___________________________________________________________________

    Outbound Routes Add Route,

    , MOH

    (

    ),

  • 5/22/2018 IP

    62/127

    IP 62

    ( 83), match patter

    . ( )

    BTC_linksys. - FreePBX

    :

    83|.

    (| ).

    Pin Set, - FreePBX

    PIN Sets, PIN-,

    .

    . 20. SPA-3102

    Asterisk PSTN

    .

  • 5/22/2018 IP

    63/127

    IP 63

    . 21. SPA-3102 PBX-

    FXS ,

    trixbox .

    ,

    extension. PBX/PBX Settings Extensions/Add extension/General SIP

    device :

    User Extension: 6667

    Display Name: SPA-3102

    Secret: btc111

    Dtmfmode: SIP INFO

    Canreinvite: no

    Context: from-internal

    Host: dynamic

    Type: friend

    Nat: No

  • 5/22/2018 IP

    64/127

    IP 64

    Port: 5061

    Qualify: yes

    : Outbound Concurrency Limit (

    ), Call Waiting ( ), Pinless Dialing( PIN PSTN PBX-

    ).

    ,

    -, .

    GSM SIP

    trixbox-GSM, VoIP

    GoIP ( Hybertone Technology, Co. Ltdhttp://hybertone.com

    DBL Technology Co., Ltd http://dbltek.com), ( $150 ) Ebay.

    . 22. GoIP GSM

    GSM

    , . SIP.

    H.323 ,

    firmware-. 1- , 2, 4

    8 GSM .

    trixbox :

  • 5/22/2018 IP

    65/127

    IP 65

    . 23. GSM

    , GoIP_Vivacom. CID

    hidden, 1 , 880,

    XXXXXXXXXXXXX. :

    Trunk Name: GoIP Vivacom

    PEER Details:

    username=6666

    fromuser=6666

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    66/127

    IP 66

    authuser=6666

    type=peer

    secret=gsmrulez

    host=192.168.50.114

    port=5060

    Qualify=yes

    dtmfmode=rfc2833

    insecure=port, invite

    canreinvite=yes

    context=from-internal

    nat=yes

    allow=g729&g723&alaw

    Incoming Settings

    USER Context: 6666

    USER Details:

    username=6666

    fromuser=6666

    authuser=6666

    type=user

    secret=gsmrulez

    host=192.168.50.114

    port=5060

    dtmfmode=rfc2833

    qualify=yes

    insecure=port,invite

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    67/127

    IP 67

    canreinvite=yes

    context=from-internal

    nat=yes

    allow=g729&g723&alaw

    Registration

    Register String:

    6666:[email protected]/6666

    Submit Changes Duplicate Trunk

    Extensions 6666 :

    Display Name

    GoIP GSM

    This device uses sip technology.

    secret

    gsmrulez

    dtmfmode RFC 2833

    canreinvite No

    context from-internal

    host dynamic

    trustrpid Yes

    sendrpid No

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    68/127

    IP 68

    type

    friend

    nat Yes

    port

    5060

    qualify yes

    callgroup

    pickupgroup

    disallow

    all

    allow g729&g723&alaw

    dial SIP/6666

    accountcode

    mailbox 6666@device

    vmexten

    deny 0.0.0.0/0.0.0.0

    permit

    0.0.0.0/0.0.0.0

    Outbound route :

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    69/127

    IP 69

    . 24.

    Dial Patterns that will use this Route

    ( ) +880

    | [ .

    / ]

    ( ) + | [ / ]

    Trunk Sequence for Matched Routes

    0

    GoIP Vivacom

    ,

    IVR- ,

    Inbound route , :

    http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    70/127

    IP 70

    . 25. GoIP GSM

    Description:

    Viva2

    DID Number: 6666

    Caller ID Number:

    Music On Hold: French

    Signal RINGING:

    Fax Detect

    Detect Faxes: No Yes

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    71/127

    IP 7

    Set Destination

    IVR IVR1

    GSM ,

    ..,

    . , GoIP

    .

    ( , , IP LAN PC ,

    SMS info SIM )

    , :

    . 26. SIP GoIP GSM

    * , ,

    SIP .

  • 5/22/2018 IP

    72/127

    IP 72

    , . ,

    G729, G723 aLaw,

    . jitter buffer , -

    NAT STUN .

    . 27. PSTN-to-VoIP VoIP-to-PSTN GoIP GSM

    Forward to PSTNForward to VoIP

    XXXXXXXXXX:. Forward Number PSTN to

    VoIP PBX ,

    .

    ,

    SIM Card Expiry, SIM

    Card Billing Time. , SMS ,

    SIM Card State Report Number,

    - SIM Card State Report

    Time.

    , , gain.html - ( ,

    -, , DTMF

    ):

  • 5/22/2018 IP

    73/127

    IP 73

    . 28. GoIP GSM -

    ITSP

    ITSP , VoiceMail,

    Conference Bridge, Follow Me, DID

    . , SIP, Asterisk

    , , .

    Fonality, -ITSP:

    CallWithUs

    CBeyond

    FonSWITCH

    VoicePulse - Download auto-config module from their account center

    Vitelity Communications

    Callcentric

    Callcentric Inbound

    JustVoip.com

    Musimi.dk

    Onfone.dk

    Ruskom (rk1.ru)

    sipgate.co.uk

    sipgate.de

    telsome.es

    Voipbuster.com

    VoipCheap.com

    vono.net.br (BR)

    Unlimitel Trunk Settings

    ITSP :

    http://fonality.com/trixbox/wiki/trixbox-ce-trunk-setup

    http://fonality.com/trixbox/wiki/trixbox-ce-trunk-setuphttp://fonality.com/trixbox/wiki/trixbox-ce-trunk-setuphttp://fonality.com/trixbox/wiki/trixbox-ce-trunk-setup
  • 5/22/2018 IP

    74/127

    IP 74

    , IPPN.

    PBX/PBX Settings/Trunks Add SIP Trunk

    . 29. SIP

    :

  • 5/22/2018 IP

    75/127

    IP 75

    Trunk Name: IPPN

    Outbound Caller ID: 024918655

    CID Options:

    Allow Any CID

    Maximum Channels: 2

    *024918655 ,

    Dialed Number Manipulation Rules

    ( ) +

    81|

    XXXXXXXXXXXX

    ( ) + |

    *81 , ,

    .

    Trunk Name: IPPN

    PEER Details:

    username=024918655

    type=peer

    qualify=yes

    secret=**********

    nat=auto

    insecure=very

    host=195.138.148.60

    fromuser=024918655

    fromdomain=195.138.148.60

    dtmfmode=inband (- rfc2833 info /SIP

    INFO/)

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    76/127

    IP 76

    context=from-trunk

    disallow=all

    allow=g729&g723&alaw (, )

    Incoming Settings

    USER Context: 4918655

    USER Details:

    username=024918655

    type=user

    secret=***********

    nat=auto

    insecure=very

    host=195.138.148.60

    fromdomain=195.138.148.60

    dtmfmode=inband

    disallow=all

    context=from-pstn

    allow=g729&g723&alaw

    Register String:

    024918655:**********@195.138.148.60/02

    . PBX/PBX Settings/Outbound Routes, :

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    77/127

    IP 77

    . 30.

    Route Name: 9_outside

    Music On Hold? default

    Time Group:

    ( )

    PIN Set:

    (a PIN )

    Dial Patterns that will use this Route

    ( ) +81

    | [ .

    / ]

    ( ) + | [ / ]

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    78/127

    IP 78

    81 ,

    . match pattern

    , . .

    . - FreePBX,

    :

    81|.

    Trunk Sequence for Matched Routes

    0

    IPPN

    1

    , ,

    .

    DID. (Inbound

    Route), :

    . 31.

    http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    79/127

    IP 79

    Description:

    IPPN_Viva

    DID Number: 024918655

    Caller ID Number:

    (CallerID ,

    )

    Music On Hold: French

    Signal RINGING:

    (MOH )

    Detect Faxes: No Yes

    ( ,

    )

    Set Destination

    IVR

    IVR1

    ( , ;

    , , ,

    ..)

    PBX/PBXSettings/Extensions.

    , SIP .

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    80/127

    IP 80

    . 32.

    User Extension 1111

    Display Name Baj Blagoi

    OutboundConcurrency Limit No Limit

    ( )

    Call Waiting Enable

    Internal Auto Answer Disable

    ( , - )

    Call Screening Disable

    ( , ,

    )

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    81/127

    IP 8

    Pinless Dialing

    Disable

    ( PIN )

    Assigned DID/CID

    DID Description

    Add Inbound DID

    ( )

    Device Options

    This device uses sip technology.

    secret sofstroi

    dtmfmode RFC 2833

    canreinvite No

    context from-internal

    host dynamic

    trustrpid Yes

    sendrpid No

    type friend

    nat No - RFC3581

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    82/127

    IP 82

    port 50699

    qualify yes

    dial SIP/1111

    accountcode

    mailbox 1111@default

    vmexten

    Deny 0.0.0.0/0.0.0.0

    Permit 0.0.0.0/0.0.0.0

    Default Group Inclusion

    Default Directory Include

    Default Page Group Include

    ( )

    Dictation Services

    Dictation Service Enabled

    Dictation Format Ogg Vorbis

    Email Address [email protected]

    ( dictation)

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    83/127

    IP 83

    Fax

    Enabled

    Fax Email [email protected]

    ( )

    Recording Options

    Record Incoming

    Alw ays

    Record Outgoing On Demand

    ( )

    Voicemail & Directory

    Status Enabled

    Voicemail Password 1111

    Email Address [email protected]

    Pager Email Address

    [email protected]

    Email Attachment yes no

    Play CID

    yes no

    Play Envelope yes no

    Delete Voicemail yes no

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    84/127

    IP 84

    ( ,

    trixbox, ,

    )

    End Point Manager

    MAC Address

    Brand

    Model

    Line

    Template

    ( - , End Point

    Manager PBX/PBX Settings)

    Optional Destinations

    No Answer

    Unavail Voicemail if Enabled

    Busy

    Extensions

    MizuPhone

    Not ReachableUnavail Voicemail if Enabled

    ( ,

    )

    Follow Me

    ,

    PBX-, Follow Me. . :

    Initial Ring Time:

    10

    Ring Strategy:

    ringallv2

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    85/127

    IP 85

    Ring Time (max 60 sec) 20

    Follow-Me List: 810888269234#

    (Initial Ring Time

    Follow Me ,

    ,

    Follow-Me List ,

    # )

    Announcement:

    auto-created: custom/phone_rec_1111

    Play Music On Hold? French

    (Announcement

    Follow Me , MOH

    )

    :

    Call Confirmation Configuration

    Confirm Calls:

    Remote Announce: Default

    Too-Late Announce: Default

    Change External CID Configuration

    Mode: Default

    Fixed CID Value:

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    86/127

    IP 86

    Destination if no answer:

    Voicemail

    Baj Blagoi (unavail)

    (a ,

    )

    -,

    Zoiper,

    ( .

    MizuPhone MizuTech).

    Options

    Add new SIP account.

    -:

  • 5/22/2018 IP

    87/127

    IP 87

    . 33. Zoiper Biz

    RFC-2833 DTMF .

    Protocol options/SIP options SIP ,

    , .. 5060.

    . 34. SIP Zoiper

  • 5/22/2018 IP

    88/127

    IP 88

    , ,

    :

    . 35. Zoiper

    , G729, G711

    alaw ( ), GoIP GSM

    - . ,

    Asterisk .

    STUN NAT :

    . 36. STUN

    , :

  • 5/22/2018 IP

    89/127

    IP 89

    . 37.

    OK, PBX- :

    . 38. Zoiper

    FaxConfiguration

    . ,

    G.711 (ulaw/alaw) .

  • 5/22/2018 IP

    90/127

    IP 90

    Fax Presentation Options

    Default Fax header: Our Company

    Default Local Station Identifier: +35924918655

    Outgoing Email address: [email protected]

    Outgoing Email address ,

    .

    Fax Feature Code Options

    Email address: [email protected]

    ,

    .

    Error Correction Mode: Yes No

    Maximum transfer rate:

    14400

    Minimum transfer rate: 2400

    ,

    .

    , Inbound routes,

    DID Fax Recipient

    . ,

    Detect Faxes: yes, PBX-

    .

    Description: IPPN2

    DID Number: 02491868

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    91/127

    IP 9

    Fax Detect

    Detect Faxes: No Yes

    Set Destination

    Fax Recipient

    MizuPhone (1112)

    IVR

    ,

    666.

    Feature Codes.

    :

    : *30

    : *32

    : *31

    : *72

    : *71

    : **

    : *2

    : 7777

    : *34

    : *35

    : *78 *79

    : 666

    : #

    : *43

    : *65

    http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    92/127

    IP 92

    : *60

    : *75

    : *98

    : *97

    Misc Applications,

    :

    Edit Misc Application

    Description:

    DISA_internal

    Feature Code: *409

    Feature Status: Enabled

    Destination:

    DISA

    VIVA Prima

    *409,

    , .

    System

    Recordings. IVR,

    . Built-in Recordings

    , Asterisk. ,

    ,

    -.

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    93/127

    IP 93

    . 39.

    , :

    1. ,

    PCM 16Bits/8KHz.

    2. , *77.

    *99 .3. ,

    Save.

    ,

    Announcements

    . :

    Add Announcement

    Description:

    Connecting

    http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    94/127

    IP 94

    Recording

    Welcome_msg_TEST

    Repeat 1

    Allow Skip

    Return to IVR

    Don't Answer Channel

    Destination after playback:

    Extensions

    Extension 5

    ,

    204.

    , Blacklist

    FreePBX. /

    .

    Add or replace entry

    Number:

    Block Unknown/Blocked Caller ID:

    CallerID

    CallerID Lookup Sources / , ,

    ENUM, HTTP MySQL.

    Asterisk .

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    95/127

    IP 95

    ( Directory)

    , IVR. IVR-

    , . ,

    . -.

    . 40.

    , ,

    office-iguanas,

    Demo_Announcement.

    .

    1111,

    ( Spell Name), 204

    phone_rec_1111.

    , IVR:

  • 5/22/2018 IP

    96/127

    IP 96

    . 41. IVR

    IVR Misc Application, :

    . 42.

    , *410,

    IVR 1

    .

  • 5/22/2018 IP

    97/127

    IP 97

    IVR

    IVR- .

    ,

    , ,

    .. , IVR.

    http://www.i6net.com, VXI*, IVR

    VoiceXML, ,

    .. - IVR,

    trixbox.

    . 43. IVR

    .

    - . ,

    IVR .

    , 0.

    http://www.i6net.com/http://www.i6net.com/http://www.i6net.com/http://www.i6net.com/
  • 5/22/2018 IP

    98/127

    IP 98

    . 44.

    - :

    CID Name Prefix: Sale

    http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    99/127

    IP 99

    ( , .

    )

    Wait Time Prefix: Yes

    ( ,

    )

    Static Agents:

    204

    1111

    ( , )

    Dynamic Members: 1112,0

    ( , )

    Agent Restrictions

    No Follow-Me or Call Forw ard

    ( Follow-Me )

    Ring Strategy: ringall

    ( , , ,

    ..)

    Skip Busy Agents: Yes

    ( )

    Music on Hold Class: inherit

    ( , , inherit

    )

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    100/127

    IP 10

    Join Announcement:None

    ( , .

    )

    Call Recording: gsm

    ( )

    Recording Mode: Af ter Answered

    ( )

    Caller Volume Adjustment:

    +2

    Agent Volume Adjustment: No Adjustment

    ( )

    Agent Announcement:

    office-iguanas

    Report Hold Time: Yes

    ( , . ,

    )

    Caller Position Announcements

    Frequency: 3 minutes

    Announce Position:

    Yes

    Announce Hold Time: No

    ( , )

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    101/127

    IP 10

    IVR Break Out Menu: Test_DIR

    Repeat Frequency: 2 minutes, 45 seconds

    ( IVR , . )

    , ,

    . , .. ,

    IVR (. 606,

    3). ring group -.

    . 45. Ring Group 600

    Time Groups Time Conditions ,

    .

    .

    -.

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    102/127

    IP 10

    . 46.

    . 47. Time Condition,

    , IVR1,

    , phone_rec_1111 .

    ,

    .

  • 5/22/2018 IP

    103/127

    IP 10

    CallBack

    Callback ,

    . . ,

    callback , :

    Callback Description:

    Test callba

    Callback Number:

    Delay Before Callback: 2

    , ,

    Caller ID

    :

    Description:

    IPPN2

    DID Number: 024918683

    Caller ID Number: 087677009

    Set Destination

    Callback

    Test callback

    , 0876770093 024918683,

    ,

    IVR1.

    Conferences,

    .

    , 8500.

    :

    Conference Number:

    8500

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    104/127

    IP 10

    Conference Name: conf room

    User PIN:

    Admin PIN:

    ( PIN )

    Conference Options

    Join Message: conference-call

    Leader Wait:

    No

    Talker Optimization: Yes

    Talker Detection: No

    Quiet Mode: No

    User Count: Yes

    User join/leave: Yes

    Music on Hold: Yes

    Music on Hold Class: inherit

    Allow Menu: Yes

    Record Conference: Yes

    Maximum Participants: No Limit

    Mute on Join: No

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    105/127

    IP 10

    , ,

    ,

    ..

    DID ,

    bridge-

    .

    DISA

    DISA ,

    ,

    . , :

    DISA name:

    Test

    PIN

    Response Timeout 20

    Digit Timeout 5

    Require Confirmation

    Caller ID

    Context from-intern

    Allow Hangup

    PIN , . Caller ID

    ID - . DISA

    IVR CallBack .

    (MOH)

    Music On Hold , -

    IVR, ,

    .

    .

    http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/http://void%28null%29/
  • 5/22/2018 IP

    106/127

    I