LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-19-2006, 11:38 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,116

Rep: Reputation: 58
Placement of Asterisk VOIP PBX


I am in the process of implementing a Asterisk PBX in my office. Looking at it from the security perspective what would be the best location for it in my network. I have thought about placing it in front of my firewall and just enable routing on the box, harden it and then have my LAN network behind my firewall. I have had some people tell me that it is preferable to place it behind my firewall and place it in the a DMZ and use port forwarding. Security Gurus lets here it!
 
Old 11-20-2006, 03:48 AM   #2
angopal
LQ Newbie
 
Registered: Nov 2006
Posts: 5

Rep: Reputation: 0
asterisk

Yea you can place your asterisk box behind your firewall, but in that case you have to specify NAT proxy for the user dialing from outside... first your firewall should be viewable for users to protect ur server...

Last edited by angopal; 11-20-2006 at 03:50 AM.
 
Old 11-20-2006, 04:11 AM   #3
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967
well this all wholly depends on what kind of architecture you have. i take it it's not a huge LAN, with only a few subnets, so your choices will presumably be limited somewhat. I can't see any good reason to put it infront of a firewall though... make your network level security deal with most of the attacks your'll get and just port forward i'd say.

Last edited by acid_kewpie; 11-20-2006 at 04:15 AM.
 
Old 11-20-2006, 06:01 AM   #4
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,116

Original Poster
Rep: Reputation: 58
So put it behind my firewall(NET Filter)and use port forwarding. Should I put it in a DMZ or just port forward into my LAN?
 
Old 11-20-2006, 06:05 AM   #5
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,414

Rep: Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967Reputation: 1967
well you should have a secure server network (or multiple) already, so yeah, but the logic of a "DMZ" often breaks down in a real environment. i woudl put it with any other internet facing servers, in a secure subnet protected from both the internet and other clients.
 
Old 11-20-2006, 10:51 AM   #6
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,116

Original Poster
Rep: Reputation: 58
So the DMZ it goes. Gentlemen thanks Rock on!
 
Old 11-20-2006, 01:02 PM   #7
operator10001
Member
 
Registered: Mar 2006
Distribution: debian sarge
Posts: 222

Rep: Reputation: 30
your voip calling should be encoded also. I recommend looking into rsa.
 
Old 11-20-2006, 02:55 PM   #8
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,116

Original Poster
Rep: Reputation: 58
can you please explain about encoding like rsa. thanks. Also can anybody recommend decent VOIP phones for the best call quality.thanks

Last edited by metallica1973; 11-20-2006 at 02:58 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: How to set up a VoIP service with Xorcom Rapid, Asterisk PBX and *starShop-OSS LXer Syndicated Linux News 0 09-13-2006 12:54 AM
Asterisk PBX understanding metallica1973 Linux - Software 1 05-24-2006 05:14 AM
LXer: Create your own Voice-over-IP PBX using Asterisk LXer Syndicated Linux News 0 02-21-2006 11:31 AM
LXer: How To: Building an Embedded Asterisk PBX LXer Syndicated Linux News 0 01-14-2006 07:16 PM
asterisk pbx 2.4 kernal what type of computer ilustrate Linux - Distributions 0 07-08-2005 06:02 PM


All times are GMT -5. The time now is 11:17 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration