What Are You Doing Right Now
-
On the phone with the UK for two hours with @StefUk
-
I'm surprised how well my phone works over ZeroTier to my PBX.
-
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
-
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
-
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
-
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
-
@scottalanmiller said:
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
My users get upset when they can't use their simple passwords... 12345, anybody?
-
@dafyre said:
@scottalanmiller said:
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
My users get upset when they can't use their simple passwords... 12345, anybody?
Wouldn't this be between the "handset" and the PBX though? Kind of a set once and forget it kind of thing.
-
@scottalanmiller said:
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
Strong passwords are fine - I basically don't want random hackers (ok ANY hackers) using my PBX to make expensive calls.
-
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
Strong passwords are fine - I basically don't want random hackers (ok ANY hackers) using my PBX to make expensive calls.
Fail2Ban can work on SIP connections. That would help a lot.
-
So picked up the old firewall I put in at my previous office. It ran on a Dell PE 2900 1U box. They retired it this month.
So now I have a driveless box here I'm wondering what to do with. I only had / have $100 in it,.. but if I use it now, I'll have to find drives.
My brother suggested a NAS - but @scottalanmiller and I have talked about this in detail, and I plan to do a build out of a 4 bay ReadyNAS.
Is my data worth that much - why yes... yes it is. Photos and such, and then I can maybe pull backups from my Dad as well.
-
@gjacobse said:
So picked up the old firewall I put in at my previous office. It ran on a Dell PE 2900 1U box. They retired it this month.
So now I have a driveless box here I'm wondering what to do with. I only had / have $100 in it,.. but if I use it now, I'll have to find drives.
My brother suggested a NAS - but @scottalanmiller and I have talked about this in detail, and I plan to do a build out of a 4 bay ReadyNAS.
Is my data worth that much - why yes... yes it is. Photos and such, and then I can maybe pull backups from my Dad as well.
Do you have an offsite backup? I've been uploading all my documents to Amazon Cloud Drive using a fuse mount. It works really well.
-
@coliver
Currently no...of sorts.I have GD(x5), OD, Dropbox, and BOX,.. not to mention OC and ODfB..
But I don't keep much on them. I might do more with ODfB for the office though.
-
@gjacobse said:
@coliver
Currently no...of sorts.I have GD(x5), OD, Dropbox, and BOX,.. not to mention OC and ODfB..
But I don't keep much on them. I might do more with ODfB for the office though.
You can get unlimited photo storage and 5Gb video storage for 6$/year. Or Unlimited everything for $60/year. It is a nice system too.
-
@coliver said:
@Dashrender said:
@scottalanmiller said:
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
Depends what degree of security that you want. Port knocking, TLS, IP locking, etc. are available features. For a lot of companies just going to strong passwords will suffice.
Strong passwords are fine - I basically don't want random hackers (ok ANY hackers) using my PBX to make expensive calls.
Fail2Ban can work on SIP connections. That would help a lot.
Fail2Ban comes with the FreePBX ISO. I typed the password incorrectly on my cell phone twice and was banned. It works really well.
-
@Dashrender said:
@johnhooks said:
@Dashrender said:
@johnhooks said:
I'm surprised how well my phone works over ZeroTier to my PBX.
what kind of phone?
Nexus 5
How difficult is it to secure an Asterisk based PBX to publish directly to the internet?
Getting away from the need to use things like ZT or VPNs would be awesome!
I have it running on my home network, that's why I did it this way.
-
@gjacobse said:
So picked up the old firewall I put in at my previous office. It ran on a Dell PE 2900 1U box. They retired it this month.
So now I have a driveless box here I'm wondering what to do with. I only had / have $100 in it,.. but if I use it now, I'll have to find drives.
My brother suggested a NAS - but @scottalanmiller and I have talked about this in detail, and I plan to do a build out of a 4 bay ReadyNAS.
Is my data worth that much - why yes... yes it is. Photos and such, and then I can maybe pull backups from my Dad as well.
Out of curiosity whats the advantage to a ReadyNAS vs building your own NAS with that box?
-
@gjacobse said:
So picked up the old firewall I put in at my previous office. It ran on a Dell PE 2900 1U box. They retired it this month.
So now I have a driveless box here I'm wondering what to do with. I only had / have $100 in it,.. but if I use it now, I'll have to find drives.
My brother suggested a NAS - but @scottalanmiller and I have talked about this in detail, and I plan to do a build out of a 4 bay ReadyNAS.
Is my data worth that much - why yes... yes it is. Photos and such, and then I can maybe pull backups from my Dad as well.
Is hardware raid a necessity or something? You can achieve great results for cheap using Linux with ZFS (Software Raid). I know a lot of people have a lot of opinions on software raid but there is very little overhead with modern processors and it's enterprise level software. One of the beautiful aspects of software raid is you don't have to worry about the firmware of the raid controller you purchased when it dies. A lot of the time they stop manufacturing them which is a headache. At the same point I'm sure SAM has a reason for recommending that. I assume this is going to be a raid 10 with 4 drives.
-
@wirestyle22 said:
Is hardware raid a necessity or something? You can achieve great results for cheap using Linux with ZFS (Software Raid). I know a lot of people have a lot of opinions on software raid but there is very little overhead with modern processors and it's enterprise level software.
No NAS box has hardware RAID. Not aware of a single one on the market for the past decade. It's all MD RAID (Linux software RAID) which is more enterprise, to normal standards, than ZFS, but it is ALL software, no matter what. ZFS is great on Solaris, but on Linux is not native and while it can work okay is pretty weird.
-
@johnhooks said:
Out of curiosity whats the advantage to a ReadyNAS vs building your own NAS with that box?
To a business, the big thing is support.
To a consumer, the big thing is "small, cheap chassis." A ReadyNAS is offered in a very nice little desktop unit with hot swap bays. It would be great if someone was making business class little chassis like that that we could build SAM-SD Minis out of, but I have not seen one yet. HP Proliant Micro is a good start, but not ideal for that. Smaller, two bay and ARM based would be really sweet.
