- Joined
- Feb 22, 2001
- Messages
- 12,243
I have never tried making a PBX system before.
Any recommendations for a small 1 phone line shop?
Freepbx, 3cx, etc....?
Any recommendations for a small 1 phone line shop?
Freepbx, 3cx, etc....?
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
So phone phreaking is alive and well.Setting one up is not too hard, but you also need to consider security around it also to be very very tight, someone manages to get in and suddenly you have a $10k bill from your provider for over seas calls.
Eh, security isn't horrible beyond the basics. As long as you aren't throwing your pbx out there on the internet directly, you're careful about where your sip traffic comes from, and you don't do anything crazy with your dial plan, you should be fine.Agree, back in the day when Elastix w2as an awesome product, it was fun to set up, I ran our companies PBX system for 80 employees, but these days, next to no one with half a brain cell hosts their own PBX system on free PBX platforms, hire someone else to deal with the headaches and just have it work. Setting one up is not too hard, but you also need to consider security around it also to be very very tight, someone manages to get in and suddenly you have a $10k bill from your provider for over seas calls.
Should be, but many people do not. They open up their SIP ports to the internet so people at home can use the PBX or soft phones on other devices, they use simple pass codes for end user devices, or the same one for all devices which can be brute forced and now someone is in and selling your lines usage. For our PBX, our ISP had helped us set it up and apparently secure it, but, they used the same passcode, left our SIP ports open and so someone got in an over a weekend racked up I think it was around $25k USD on calls to the dominican republic. our ISP didnt get anything from us cause they also claimed they monitored the services for unusual activity and considering all of our customers, 99% , were all in the U.S....Eh, security isn't horrible beyond the basics. As long as you aren't throwing your pbx out there on the internet directly, you're careful about where your sip traffic comes from, and you don't do anything crazy with your dial plan, you should be fine.
All true, but really; securing the PBX isn't rocket surgery. While throwing open SIP to the internet is generally a "Bad Idea(tm)", you can do things to secure it. If you know approximately what IPs to expect the traffic from you can use that to drop SIP packets from everywhere else. If folks at home want to use soft phones, then I'd highly recommend a VPN ( openvpn ) and tunnel the traffic through that. Lacking that, you could use sip-tls and srtp ( although I'd highly recommend the VPN route ). If Digium ever gets off their ass and fixes the firmware in their phones, you'll be able to do all that in the phone directly. sip-tls and srtp works, but the openvpn client is broken in that it ignores the server-pushed dns so the phone can't resolve internal names.Should be, but many people do not. They open up their SIP ports to the internet so people at home can use the PBX or soft phones on other devices, they use simple pass codes for end user devices, or the same one for all devices which can be brute forced and now someone is in and selling your lines usage. For our PBX, our ISP had helped us set it up and apparently secure it, but, they used the same passcode, left our SIP ports open and so someone got in an over a weekend racked up I think it was around $25k USD on calls to the dominican republic. our ISP didnt get anything from us cause they also claimed they monitored the services for unusual activity and considering all of our customers, 99% , were all in the U.S....