Changes

From SME Server
Jump to navigationJump to search
Updated for latest Sail ACL security
Line 56: Line 56:  
  type=friend
 
  type=friend
 
  username=FaxModem
 
  username=FaxModem
  secret=asterisk
+
  secret=xYz3aB45
 
  host=dynamic
 
  host=dynamic
 
  qualify=3000
 
  qualify=3000
 
  context=internal
 
  context=internal
 
  callerid="Faxmodem" <2000>
 
  callerid="Faxmodem" <2000>
 +
mailbox=2000
 +
pickupgroup=1
 +
callgroup=1
 +
call-limit=99
 +
subscribecontext=extensions
 +
deny=0.0.0.0/0.0.0.0
 +
permit=127.0.0.1/255.255.255.0
 
  disallow=all
 
  disallow=all
 
  allow=slin
 
  allow=slin
 +
requirecalltoken=no
    +
{{Note box| The 'secret' is a strong extension password generated automatically by Sail. It should not be changed, other than to another strong password. The value shown above is a dummy example.}}
 +
{{Note box| The latest revisions of Sail generate ACL deny/permit security in the stanza. The <nowiki>permit=</nowiki> ACL will default to allow access on the local IP. You will need to change this to 127.0.0.1 as above}}
 
{{Note box| After updating to Asterisk14-1.4.28-88, the fax extension fails to register, and gives the following error in the asterisk cli,
 
{{Note box| After updating to Asterisk14-1.4.28-88, the fax extension fails to register, and gives the following error in the asterisk cli,
 
  <nowiki>chan_iax2.c:4322 handle_call_token: Call rejected, CallToken Support required. If unexpected, resolve by placing address 127.0.0.1 in the calltokenoptional list or setting user 2000 requirecalltoken=no </nowiki>
 
  <nowiki>chan_iax2.c:4322 handle_call_token: Call rejected, CallToken Support required. If unexpected, resolve by placing address 127.0.0.1 in the calltokenoptional list or setting user 2000 requirecalltoken=no </nowiki>
Added <nowiki>requirecalltoken=no</nowiki> to stanza for fax extension and registered OK again}}
+
Add <nowiki>requirecalltoken=no</nowiki> to stanza for fax extension and it will register OK again}}
+
 
 
===IAXModem===
 
===IAXModem===
 
====Installation====
 
====Installation====
Line 116: Line 126:  
  /sbin/e-smith/expand-template /etc/iaxmodem/ttyIAX0
 
  /sbin/e-smith/expand-template /etc/iaxmodem/ttyIAX0
 
*This will create the necessary ttyIAX0 file, using the settings from Sail/Asterisk. It assumes you have set the Fax extension in ''globals'' and have created a valid ''extension'' of type ''IAXModem''.
 
*This will create the necessary ttyIAX0 file, using the settings from Sail/Asterisk. It assumes you have set the Fax extension in ''globals'' and have created a valid ''extension'' of type ''IAXModem''.
{{Note box|If the required settings are not available in Sail/asterisk then it defaults to an extension of '2000', a secret/password of 'asterisk', a CID Name of ''NoName'' and Caller ID of ''0123456789''}}
+
{{Note box|If the required settings are not available in Sail/asterisk then it defaults to an extension of ''2000'', a secret/password of ''asterisk'', a CID Name of ''NoName'' and Caller ID of ''0123456789''. The default password of 'asterisk' is not secure and both this and the 'secret' value of the extension in Sail should be changed to a strong password. If the extension has been created in Sail then a strong password will have been generated automatically}}
    
====Check and Run====
 
====Check and Run====

Navigation menu