Differences

This shows you the differences between two versions of the page.

--- asterisk [2025/07/12 09:36] – nicolas
+++ asterisk [2025/07/21 10:56] (current) – [Oracle Cloud Infrastructure PBX Server Setup] nicolas
@@ Line 20: / Line 20: @@
 # Copy down private key, store and set security on it
 cd keys
-sudo chmod 60 ssh-key-2025-07-11.key
+sudo chmod 60 ssh-key-2025-07-19.key
 # ssh on to cloud instance
-sudo ssh -i ./keys/ssh-key-2025-07-11.key ubuntu@152.67.159.88
+sudo ssh -i ./keys/ssh-key-2025-07-19.key ubuntu@xx.xx.xx.xx
 sudo apt update
 sudo apt full-upgrade
@@ Line 31: / Line 31: @@
 sudo systemctl start cron
 sudo systemctl enable cron
+sudo apt install ufw
+sudo apt install net-tools
 </code>
-https://www.atlantic.net/vps-hosting/how-to-install-asterisk-and-freepbx-on-ubuntu/
+===UFW install===
-after ./install -n
-messages about SIP missing
-fwconsole ma install pm2
-Rerun ./install -n
+Revised to install UFW, use this instead of directly changing iptables
 <code>
-sudo apt update
+sudo ufw status
-sudo apt full-upgrade
+sudo ufw allow http
-sudo apt install apache2 -y
+sudo ufw allow ssh
-sudo usermod -G www-data -a ubuntu
+sudo ufw allow 5060:5061/udp
-sudo usermod -G www-data -a root
+sudo ufw allow 10000:20000/udp
-sudo chown -R www-data:www-data /var/www/html
+sudo ufw enable
-sudo chmod -R 775 /var/www/html
-sudo apt install php7.4-common php7.4-cgi php7.4 -y
-sudo apt install libapache2-mod-php7.4 -y
 </code>
-<code>
+===Asterisk / FreePBX on Ubuntu===
-sudo nano /etc/apache2/sites-enabled/000-default.conf
-<VirtualHost *:80>
+https://www.atlantic.net/vps-hosting/how-to-install-asterisk-and-freepbx-on-ubuntu/
-        # The ServerName directive sets the request scheme, hostname and port that
-        # the server uses to identify itself. This is used when creating
-        # redirection URLs. In the context of virtual hosts, the ServerName
-        # specifies what hostname must appear in the request's Host: header to
-        # match this virtual host. For the default virtual host (this file) this
-        # value is not decisive as it is used as a last resort host regardless.
-        # However, you must set it for any further virtual host explicitly.
-        #ServerName www.example.com
-        ServerAdmin webmaster@localhost
+===FreePBX Config===
-        DocumentRoot /var/www/html
-        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+Load User and other modules - Admin, Check Online, Select then process.
-        # error, crit, alert, emerg.
-        # It is also possible to configure the loglevel for particular
-        # modules, e.g.
-        #LogLevel info ssl:warn
-        ErrorLog ${APACHE_LOG_DIR}/error.log
+if you need to Unlock the admin page
-</code>
+sudo fwconsole unlock s231lcov0fbdsnhaiidchantu4 (highlighted PHP session text)
-<code>
+User Ext Setup
-sudo nano /etc/apache2/ports.conf
-# If you just change the port or add more ports here, you will likely also
+Had to change SIP port directly in asterisk - FreePBX ad restart did not work
-# have to change the VirtualHost statement in
+sudo nano /etc/asterisk/sip_general_additional.conf
-# /etc/apache2/sites-enabled/000-default.conf
-Listen 80
+Revise
+sudo nano /etc/php/*/apache2/php.ini
+; Maximum amount of memory a script may consume
+; https://php.net/memory-limit
+memory_limit = 256M
-<IfModule ssl_module>
-        Listen 443
-</IfModule>
-<IfModule mod_gnutls.c>
+SIP TCP Port Min: 560 - 580 updated
-        Listen 443
-</IfModule>
-# vim: syntax=apache ts=4 sw=4 sts=4 sr noet
+===Asterisk Security===
-</code>
-<code>
+https://computingpost.medium.com/secure-asterisk-and-freepbx-from-voip-fraud-and-brute-force-attacks-118af5b31e41
-sudo systemctl restart apache2
-</code>
-Update firewall rules 42002 Reflector and 80 Web Dashboard
-<code>
-sudo iptables -I INPUT 6 -m state --state NEW -p tcp --dport 80 -j ACCEPT
-sudo iptables -I INPUT 6 -m state --state NEW -p tcp --dport 42002 -j ACCEPT
-sudo iptables -I INPUT 6 -m state --state NEW -p udp --dport 42002 -j ACCEPT
-sudo netfilter-persistent save
-</code>
-Check firewall rules
-<code>
-sudo iptables -S
-</code>
+----
 ====Hams Over IP install====
@@ Line 143: / Line 104: @@
 ===Connect Ext 2 to Local Asterisk PBX===
-TCP must be enabled. PBX on different IP so can use default port.
+UDP must be enabled. PBX on different IP so can use default port.
-Ext 2 tab - line enable AND Phone tab - Line key 2 enabled.
+Ext 2 tab - Line enable AND Phone tab - Line key 2 enabled.
+===Connect using a different SIP port===
+In EXT change the SIP port and add the port number to the proxy address 141.147.xx.xx:portnumber
 ===Change background image on phone===
@@ Line 153: / Line 118: @@
 https://wiki.hamshackhotline.com/doku.php?id=tt:tips.and.tricks:spare.line.key.functions
+https://hamsoverip.github.io/wiki/endpoints/hard_phones/cisco504g/#make-a-test-call
 ===Reboot===