Эх сурвалжийг харах

Merge pull request #3 from DigiDaz/master

Add some essential rules
FusionPBX 9 жил өмнө
parent
commit
36c28e1dd8

+ 1 - 1
README.md

@@ -14,7 +14,7 @@ cd /usr/src/fusionpbx-install.sh/debian
 
 
 At the end of the install it will instruct you to go to the ip address of the server in your web browser to finish the install. It will also provide a random database password for you to use during the web based phase of the install. The install script builds the fusionpbx database so you will not need to use the create database username and password on the last page of the web based install.
 At the end of the install it will instruct you to go to the ip address of the server in your web browser to finish the install. It will also provide a random database password for you to use during the web based phase of the install. The install script builds the fusionpbx database so you will not need to use the create database username and password on the last page of the web based install.
 
 
-After you have completed the install you can login with the username and password you chose during the install. After you login go to them menu then Advanced -> Upgrade select the checkbox for App defaults. Then go to Status -> SIP Status and start the SIP profiles.
+After you have completed the install you can login with the username and password you chose during the install. After you login go to them menu then Advanced -> Upgrade select the checkbox for App defaults. Then go to Status -> SIP Status and start the SIP profiles, after this, go to Advanced -> Modules and find the module Memcached and click start.
 
 
 For additional information to get started go to http://docs.fusionpbx.com/en/latest/getting_started.html 
 For additional information to get started go to http://docs.fusionpbx.com/en/latest/getting_started.html 
 
 

+ 9 - 1
debian/resources/iptables.sh

@@ -4,6 +4,14 @@
 echo "Configure IPTables"
 echo "Configure IPTables"
 
 
 #run iptables commands
 #run iptables commands
+iptables -A INPUT -j DROP -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm
+iptables -A INPUT -j DROP -p udp --dport 5060 -m string --string "sipcli/" --algo bm
+iptables -A INPUT -j DROP -p tcp --dport 5060 -m string --string "friendly-scanner" --algo bm
+iptables -A INPUT -j DROP -p tcp --dport 5060 -m string --string "sipcli/" --algo bm
+iptables -A INPUT -j DROP -p udp --dport 5080 -m string --string "friendly-scanner" --algo bm
+iptables -A INPUT -j DROP -p udp --dport 5080 -m string --string "sipcli/" --algo bm
+iptables -A INPUT -j DROP -p tcp --dport 5080 -m string --string "friendly-scanner" --algo bm
+iptables -A INPUT -j DROP -p tcp --dport 5080 -m string --string "sipcli/" --algo bm
 iptables -A INPUT -i lo -j ACCEPT
 iptables -A INPUT -i lo -j ACCEPT
 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 iptables -A INPUT -p tcp --dport 22 -j ACCEPT
 iptables -A INPUT -p tcp --dport 22 -j ACCEPT
@@ -23,4 +31,4 @@ iptables -P OUTPUT ACCEPT
 #answer the questions for iptables persistent
 #answer the questions for iptables persistent
 echo iptables-persistent iptables-persistent/autosave_v4 boolean true | debconf-set-selections
 echo iptables-persistent iptables-persistent/autosave_v4 boolean true | debconf-set-selections
 echo iptables-persistent iptables-persistent/autosave_v6 boolean true | debconf-set-selections
 echo iptables-persistent iptables-persistent/autosave_v6 boolean true | debconf-set-selections
-apt-get install -y --force-yes  iptables-persistent
+apt-get install -y --force-yes  iptables-persistent