event_guard.rst 1.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. ########
  2. Event Guard
  3. ########
  4. This is an optional service called event_guard and it was designed to protect your VoIP server. It watches registration events and blocks those that abuse it. It doesn't watch server logs. It currently supports iptables and pf firewalls. Netfilter firwall support will be added in the future.
  5. Event guard logs blocked and unblocked calls to Status -> Event Guard. Event guard uses the Advanced -> Access Control allowed nodes as a white list. Can add a new Access Control List called Customers or any name you like set to default deny then add the customer CIDR to a new node set as allowed.
  6. Event Guard also looks at the current allowed IP addresses and trusts these registered IP addresses that were authenticated.
  7. Install Instructions
  8. ^^^^^^^^^^^^^^^^^^^^
  9. - Make sure to upgrade to the latest FusionPBX version
  10. - Update the database structure
  11. - Advanced -> Upgrade -> Schema
  12. - Update App Defaults
  13. - Advanced -> Upgrade -> App Defaults
  14. * Run the following commands to install as a service
  15. ::
  16. cp /var/www/fusionpbx/app/event_guard/resources/service/debian.service /etc/systemd/system/event_guard.service
  17. systemctl enable event_guard
  18. systemctl start event_guard
  19. systemctl daemon-reload
  20. - or as a cron job
  21. php /var/www/fusionpbx/app/event_guard/resources/service/event_guard.php >/dev/null 2>&1 &
  22. ::
  23. Unblock an IP Address
  24. ^^^^^^^^^^^^^^^^^^^^
  25. To unblock an address select the check box and then press the UNBLOCK button on the top right.