[ IP

 IP

.............................................................................................................................................. 4
.................................................................................................................. 4
..................................................................................................... 4
, ............................................................................................. 5
.............................................................................................................................. 8
Asterisk, ? ............................................................................................................................ 9
Elastix .............................................................................................................................................. 9
trixbox ........................................................................................................................................... 11
.......................................................................................................................... 14
...................................................................................... 18
FreePBX ............................................................................... 22
G.729 G.723 ................................................................................................ 27
Asterisk CLI ......................................................................................................... 29
........................................... 34
Asterisk Manager ........................................................................................... 34
ARI .............................................................................. 36
MySQL .............................................................................................................. 37
root MySQL ............................................................................................... 38
root ............................................................................... 40
maint .............................................................................................. 41
Web-Meetme .............................................................................. 41
FOP .............................................................................................. 42
................................................................................... 43
fail2ban ................................................................................................................. 44
iptables................................................................................................. 48
.............................................................................................................. 55
PSTN SIP ............................................................................................................... 56
GSM SIP .................................................................................................................... 64
ITSP ..................................................................................................................................... 73
.......................................................................................... 79
Follow Me ........................................................................................................... 84

 IP
...................................................................................... 86
................................................................................................................... 89
............................................ 91
............................................................................ 92
................................................................................... 93
..................................................................................................... 94
CallerID ...................................................................... 94
........................................................................................................ 95
IVR ...................................................................................................................... 97
.............................................................................................. 97
.................................................................................... 101
................................................................ 101
CallBack ............................................................................................................ 103
............................................................................................ 103
DISA .................................................................................................................. 105
(MOH) .......................................................................... 105
PIN ........................................................................................ 106
.......................................................................................... 107
....................................................................................... 107
Backup ........................................................... 108
...................................................................... 109
Call Detail Record................................................................................................................................. 111
.................................................................................................................. 114
HUD server + client .............................................................................................................................. 114
web ........................................................................... 117
FOP ...................................................................................................................................................... 121
Web-MeetMe ...................................................................................................................................... 122
........................................................................................................................................ 124
.......................................................................................................................................... 125
..................................................................... 126

 IP

, ,
. ,
,
, ,
.

IP
. ,
,
. ,
, .

, Voice over IP
, .
15 .. ,
5 .
,
- - ,
PSTN GSM (), ,
, callback, , Interactive
Voice Response .
,
, ,
,
, ..
- / + .

VoIP
.
VoIP
. ,
- PBX ,
. - VoIP
,

 IP

Skype. messnger,
.
Skype target ,

.
,
SIP ,
, . ,
H.323,
IP ,
NAT (Network Address Translation). H.323

/.

,
, .
.. ,
, :

Blink
Ekiga

Linux, Mac OS, Windows
Linux, (Beta Windows
support), OpenSolaris

GPL/Free software
GPL/Free Software

Gizmo5

Linux, Mac OS, Windows,

Win Mobile, Blackberry,
Nokia, PDA Java
Linux, Windows
Windows, Mac OS
Linux, Mac OS, Windows
Mac OS, Windows

Freeware/Closed
Proprietary

Linphone
Mirial Softphone
QuteCom
SightSpeed
SIP Communicator
Spikko

Yahoo! Messenger

Linux, Mac OS, Windows

Windows, Win Mobile,
IPhone
Linux, Mac OS, Windows,
Windows Mobile
Mac OS, Windows, Linux

Zfone

Linux, Mac OS, Windows

Zoiper

Linux, Mac OS, Windows

X-Lite X-PRO

GPL/Free software
Closed Proprietary
GPL/Free software
Freeware/Closed
Proprietary
LGPL/Free Software
Freeware/Closed
Proprietary
Freeware/Closed
Proprietary
Freeware/Closed
Proprietary
Freeware/Viewable source
Proprietary
Freeware/Closed
Proprietary

1. SIP

ICE, SIP, MSRP, RFB (VNC)

SIP, H.323, H.263,
H.264/MPEG-4, AVC,
STUN, Theora, Zeroconf
SIP, XMPP

SIP
SIP, H.323, RTSP
SIP
SIP, RTP, Proprietary P2P
protocol
SIP/SIMPLE, XMPP
SIP
SIP, STUN, ICE
SIP, RTP
SIP, RTP
SIP, RTP

 IP

Zoiper Classic,
G.729 29.45.
ATA IP SIP,
,
. -
IP , Grandstream, - Linksys. , Zoiper
*:

SIP + IAX / IAX 2 protocols

STUN support
STUN server per account
TCP support with SIP
TLS support with SIP
TLS with SRTP support
Available codecs - GSM, ulaw, alaw, speex, ilbc
G.729 (optional, with Zoiper Biz only)
T.38 Fax-receiving and Fax-sending capabilities
DSCP support
Echo cancellation
Changeable number of lines (up to 6)
Multilanguage support
Native conferencing (SIP only)
API
Account import (XML)
Selectable Strip dial characters option
Automatic provisioning (XML)
Callto URL protocol
Incoming URL handling
Automatic opening of incoming URL
Open URL on different call events
Auto answer
Mail program plug-in: Outlook integration

Windows

OS
Linux

MAC OS X

 IP

Mail program plug-in: Thunderbird integration

Portable Zoiper with portable devices (USB
sticks, flashcards, etc.)
Blind call transfer
Attended transfer
Call forward
Account password encryption
Codec settings per account
Automatic user registration
Optional Automatic pop-up window for
incoming call
Hold function
Support for multiple audio devices
Adaptive Jitter Buffer
Voice mail message information
Access voice mail message with one button
Command line dialing
Number of accounts

2 accounts for Zoiper Free; Unlimited for Zoiper Biz

Outband DTMF tones sending

Call recording (Single file recordings)
Custom ring tones
Call logs
Call history
Address book
Quick dial panel
Always on top
Minimize on start up
Minimize to tray

2. Zoiper
* Zoiper
Zfone, ,
Zoiper,
Zfone, ZRTP.

 IP

,
PKI DiffieHellman .

,
, PBX SIP.
, ,
. - :
-

3CX Phone System

Avaya Aura
AS5300 Cisco
Blue.Box (http://www.2600hz.org, FreePBX)
Cisco Unified Communications Manager
FonicaPABX (http://www.fonicaprojects.com, FreePBX)
Snom One Plus
Mizutech VoIP Server
ClearSea
Communigate Pro
Elastix (http://www.elastix.org/, FreePBX)
FreeSwitch
Mysipswitch (SIP , )
Kamailio/OpenSIPS
Pbxnsip
PIAF /PBX in a Flash/ (http://pbxinaflash.com, FreePBX)
Revation LinkLive
SIP Express Router ( SIP )
sipX ECS IP PBX
TrixBox (http://trixbox.org, FreePBX)
Unison
vzRoom

,
,
.
,
Cisco
.

 IP

, .
,
.
SIP Elastix trixbox,
Asterisk FreePBX.

Asterisk, ?
Asterisk ( . *) 1999. ,
Digium, PBX
. PBX, ,
PSTN VoIP , , MOH,
, IVR .
,
Asterisk, C AGI (Asterisk Gateway
Interface) , , stdin stdout
TCP . Asterisk ,
IP , VoIP, SIP, MGCP, H.323, Asterisk
IAX2 (Inter-Asterisk Exchange), IP
. VoIP ,
ISDN SS7,
.
. Zaptel, Libpri, Libss7, chanss7, wanpipe
.
Linux, Asterisk NetBSD,
OpenBSD, FreeBSD, Mac OS X Solaris. Microsoft Windows,
AsteriskWin32.
Asterisk PABX in a box ,
.

Elastix
Elastix ,
.

 IP

.1. Elastix
Elastix :
-

--

Web


LCR (- )

PBX
CID
CRM
()
IVR



Call parking
CDR

()
Queues

10

 IP

(ring groups)


PIN
(DISA)
Callback
Bluetooth (chan_mobile)
, HylaFax
PDF
--

SendFax web


ACL

Backup web
PBX
click-to-dial
CRM , (vTigerCRM SugarCRM)
(IM) Openfire
,
Web IM
Web

Elastix , Call Center ,

, CRM
(Oracle, MS SQL, Mysql, Postgresql).
GPLv2, .
, Elastix ,
, -

trixbox
2004. Asterisk@Home
2006. trixbox CE Digium,

11

 IP

Asterisk,
.
. Asterisk@Home :
http://asteriskathome.sourceforge.net/handbook/
100,000 , trixbox CE - IP PBX
. trixbox,
trixbox CE, trixbox PRO
Fonality, .
Elastix, trixbox , PBX ,
:
-

CentOS 5, RedHat Linux

Apache web
PHP5
MySQL
Asterisk
FreePBX (http://www.freepbx.org)

.2. ,

12

 IP

web ,
. Trixbox CE
Elastix, , ,
A2Billing. Trixbox CE
CDR, web , WebMeetMe FOP (Flash Operations Panel ).
, trixbox PRO ,
PBXtra, , HUD Pro,
.
FXO, FXS, BRI PRI ,
PC , . Digium, Sangoma, Rhino
OpenVox. ,
:
http://hardware.redhat.com/
firmware-
tftp, MAC SIP ,
IP :
-

Aastra
Cisco
Grandstream
Linksys
Polycom
Snom

, PBX- 100
( 4T1). -
trixbox ,
,
(load balancing)
. :
-

8-24 :
dual-core + 1Gb RAM
- 24-48 : Xeon ~ 2.0Ghz + 2Gb RAM + SATA RAID1
(RAID5 )

13

 IP

48-100 : Dual Xeon ~ 2.8-3.0Ghz + 4Gb RAM + SAS

RAID1 2 trixbox- 24-48

OEM :
http://www.trixbox.org/wiki/OEM_Servers
:
http://fonality.com/trixbox/wiki/motherboard-list
, :
http://www.asteriskmotherboards.com/

trixbox
. .. LiveCD
trixbox , , usb drive
, . VmWare VirtualBox na Sun.
, ,
:
http://www.fonality.com/trixbox/devblog/introducing-new-trixbox-ce-livecd
VmWare VirtualBox,
ISO Fonality,
:
http://www.fonality.com/trixbox/downloads
:
trixbox CE 2.8.0.4

trixbox CE 2.6.2.3
Asterisk. ,
, ,

14

 IP

,
.. RAM ,
VmWare VirtualBox appliance 768Mb.
,
, VmWare appliance,
,
. ,
trixbox_2.6.1-vmware.zip, :
ftp://ftp.sympad.net/pub/TrixBox/trixbox_2.6.1-vmware.zip
,
VmWare player, Open vmx
.

.1. VmWare Player

.

15

 IP

.2. trixbox
, ,
, hudlite-server, ircd .
IP ,
DHCP VmWare.
bridge , ,
NAT . , Devices
Network Adapters, Bridged.
, root
trixbox. , ifconfig MAC
, HwAddr:

16

 IP

. 3. trixbox

MAC PBX ,
IP , DHCP
. trixbox
192.168.50.108.
, VmWare player,
( WinXP),
VmWare , "%ProgramFiles%\VMware\VMware
Player\vnetcfg.exe".

17

 IP

. 4. VmWare
, VMnet0 bridge-
. IP
trixbox, reboot.

trixbox HTTP ,
. 192.168.50.108,
-.

18

 IP

. 5. web
, :
-

Voicemail and Recordings:

Web MeetMe:

FOP /Flash Operator Panel/: ,

, .

, switch,
User mode. maint
password.

19

 IP

. 6.
, PBX
. - , :
-

System Status
Packages
PBX
o PBX settings
o Config File Editor
o PBX Status
o Endpoint Manager
o Bulk Extensions
o HUDlite Admin / /
o CDR Report
System
o phpMyAdmin / /
o System Info
o System Maint
o Network
Settings
o Repositories
o Registration
o General Settings

20

 IP

Help
o About trixbox
o Training
o Support

,
Fonality,
Settings/Registration Dont ask me to register again.
PBX/General Settings,
FreePBX. , FreePBX ,
. ,
, :
Extension Recording Override:
Call recording format:

Disabled

gsm

Bulgaria

Country Indications:

yes

24-hour format:

Security Settings
Allow Anonymous Inbound SIP Calls?:

yes

Settings/Repositories ,
, .
:
-

trixbox Stable

trixbox Addons

Packages ,
tbm-phpmyadmin hudlite-server,
firmware- .

21

 IP

FreePBX
PBX/PBX Settings/Module Admin , ,
:

versionupgrade (2.4.0.2)
phpagiconf (2.4.0)
queues (2.4.0.6)
phpinfo (2.4.0)
javassh (2.4.0)
languages (2.4.0.2)
cidlookup (2.4.0.1)
pbdirectory (2.4.0.2)
vmblast (2.4.3.2)
callforward (2.4.0)
pinsets (2.4.0)
miscapps (2.4.0.2)
callback (2.4.0.1)
voicemail (2.4.0.1)
miscdests (2.4.0.2)
asteriskinfo (2.4.0)
daynight (2.4.0.3)
announcement (2.4.0.1)
logfiles (2.4.0)
asterisk-cli (2.4.1)
printextensions (2.4.1)
manager (2.4.0)
infoservices (2.4.0.1)
callwaiting (2.4.0)
findmefollow (2.4.14.2)
dashboard (2.4.0.3)
ringgroups (2.4.0.2)
featurecodeadmin (2.4.0.2)
music (2.4.0.3)
blacklist (2.4.0.2)
disa (2.4.0.4)
phonebook (2.4.0.1)
parking (2.4.0.6)
paging (2.4.0.5)
recordings (3.3.6.3)
core (2.4.1.1)
conferences (2.4.0.3)
ivr (2.5.17)

22

 IP

framework (2.4.1.0)
timeconditions (2.4.4.3)
donotdisturb (2.4.0)
tbbackup (2.4.3)
dictate (2.4.0)
customappsreg (2.4.0.5)

. 7. FreePBX

.
*: FreePBX
. ,
DISA,
.
PBX/PBX Settings 2.5 Upgrade Tool.
FreePBX trixbox.
, Module Admin,
Check Online, FreePBX Framework
Process .
FreePBX Framework,
( ).
Check Online,
. Update All, Process
.

23

 IP

. 8. FreePBX

FreePBX Framework - 2.9.0beta2.1.
*: Asterisk DISA (.
DTMF GSM , ..)
Asterisk .
,
, (
RPM Zaptel).
** trixbox SSH ,
, . , Windows
Putty SSH :
http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe
root trixbox.
:
1. :

24

 IP

[trixbox1.localdomain ~]# wget http://download.fedora.redhat.com/pub/epel/5/i386/zaptel1.4.12.1-1.el5.i386.rpm

2. no dependencies:
[trixbox1.localdomain ~]# rpm -Uvh --nodeps zaptel-1.4.12.1-1.el5.i386.rpm
3. :
[trixbox1.localdomain ~]# wget
ftp://ftp.pbone.net/mirror/yum.trixbox.org/centos/5/RPMS/zaptel-1.4.12.9-1_trixbox.i686.rpm
4. no dependencies:
[trixbox1.localdomain ~]# rpm -Uvh --nodeps zaptel-1.4.12.9-1_trixbox.i686.rpm
5. Asterisk:
[trixbox1.localdomain ~]# yum update asterisk
6. Asterisk :
[trixbox1.localdomain ~]# amportal restart
* ,
reboot.
, Midnight Commander
Nano:
[trixbox1.localdomain ~]# yum install mc nano
service memcached,
:
[trixbox1.localdomain ~]# yum install memcached
**: CentOS
:
[trixbox1.localdomain ~]# yum update exclude=zaptel* --exclude=asterisk* --exclude=libpri* -exclude=web-meetme* --exclude=memcached* --exclude=libevent* --exclude=nfs-utils*

, .

25

 IP

web , update .
- :
/var/www/html/maint/skin/default ../
***: ,
trixbox
.

. 9. CentOS
Packages web ,
/.
yum, :
[trixbox1.localdomain ~]# yum install tbm-phpmyadmin *speex*

26

 IP

G.729 G.723
trixbox G.729 G.723.
, speex ,

. Asterisk,
CLI Asterisk, :
[trixbox1.localdomain ~]# asterisk r
( vvv debug)
Asterisk CLI, :
trixbox1*CLI> show codecs
.
G.729 CS-ACELP (Conjugate-Structure Algebraic-Code-Excited
Linear Predictive) . , G.729 -
/ - ,
8kbps,
.
G.729: G.729 Annex A, G.729B, G.729AB, G.729D (6.4kbps) G.729E
(11.8kbps).
G.729 Digium, /
$10:
http://www.digium.com/en/products/g729codec.php
, ,
,
. , ,
:
1. Asterisk :
[trixbox1.localdomain ~]# asterisk -v |less
Asterisk 1.4.22-4 RPM by vc-rpms@voipconsulting.nl, Copyright (C) 1999 - 2008 Digium,
Inc. and others.
2. :
[trixbox1.localdomain ~]# cat /proc/cpuinfo
processor
:0

27

 IP

vendor_id
: GenuineIntel
cpu family : 6
model
: 15
model name : Intel(R) Core(TM)2 Duo CPU T5450 @ 1.66GHz
stepping
: 13
cpu MHz
: 1662.682
cache size : 2048 KB
fdiv_bug
: no
hlt_bug
: no
f00f_bug
: no
coma_bug
: no
fpu
: yes
fpu_exception : yes
cpuid level : 10
wp
: yes
flags
: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36
clflush dts acpi mmx fxsr sse sse2 ss nx constant_tsc up arch_perfmon pebs bts pni ssse3
bogomips
: 3720.61
clflush size : 64
3. http://asterisk.hosting.lv/ trixbox
, :
[trixbox1.localdomain ~]# cd /usr/lib/asterisk/modules
[trixbox1.localdomain ~]# wget http://asterisk.hosting.lv/bin/codec_g729-ast14-gcc4glibc-core2.so
[trixbox1.localdomain ~]# wget http://asterisk.hosting.lv/bin/codec_g723-ast14-gcc4glibc-core2.so
4. Asterisk CLI :
[trixbox1.localdomain ~]# asterisk r
trixbox1*CLI> load codec_g729-ast14-gcc4-glibc-core2.so
trixbox1*CLI> load codec_g723-ast14-gcc4-glibc-core2.so
, :

28

 IP

. 10.
Asterisk quit.
5. web
trixbox (PBX/Config File Editor),
sip_general_custom.conf iax_general_custom.conf:
[trixbox1.localdomain ~]# mcedit /etc/asterisk/sip_general_custom.conf

[trixbox1.localdomain ~]# mcedit /etc/asterisk/iax_general_custom.conf

:
allow=g729
allow=g723
Sip_general_custom.conf Iax_general_custom.conf
,
SIP IAX .
, ,
:
[trixbox1.localdomain ~]# asterisk r
trixbox1*CLI> sip show channels

Asterisk CLI
Asterisk CLI , - :
trixbox1*CLI> reload

29

 IP

* Asterisk
trixbox1*CLI> sip history
SIP History Recording Enabled (use 'sip show history')
*
sip show history
trixbox1*CLI> sip show settings
trixbox1*CLI>

Global Settings:
---------------SIP Port:

5060

Bindaddress:

0.0.0.0

Videosupport:

No

AutoCreatePeer:

No

Allow unknown access: Yes

Allow subscriptions: Yes
Allow overlap dialing: Yes
Promsic. redir:

No

SIP domain support:

No

Call to non-local dom.: Yes

URI user is phone no: No
Our auth realm
Realm. auth:

asterisk
No

Always auth rejects: Yes

Call limit peers only: Yes
Direct RTP setup:

No

30

 IP

User Agent:

FPBX-2.9.0beta2(1.4.22)

MWI checking interval: 10 secs

Reg. context:
Caller ID:

(not set)
Unknown

From: Domain:
Record SIP history:

On

Call Events:

Off

IP ToS SIP:

CS3

IP ToS RTP audio:

EF

IP ToS RTP video:

AF41

T38 fax pt UDPTL:

No

RFC2833 Compensation: No
SIP realtime:

Disabled

trixbox1*CLI>
Global Signalling Settings:
--------------------------Codecs:

0x10f (g723|gsm|ulaw|alaw|g729)

Codec Order:

g729:20,g723:30,gsm:20,ulaw:20,alaw:20

T1 minimum:

100

Relax DTMF:

Yes

Compact SIP headers: No

RTP Keepalive:

0 (Disabled)

RTP Timeout:

0 (Disabled)

RTP Hold Timeout:

0 (Disabled)

MWI NOTIFY mime type: application/simple-message-summary

DNS SRV lookup:

Yes

31

 IP

Pedantic SIP support: No

Reg. min duration

60 secs

Reg. max duration:

3600 secs

Reg. default duration: 120 secs

Outbound reg. timeout: 20 secs
Outbound reg. attempts: 0
Notify ringing state: Yes
Notify hold state:

Yes

SIP Transfer mode:

open

Max Call Bitrate:

384 kbps

Auto-Framing:

No

trixbox1*CLI>
Default Settings:
----------------Context:
Nat:

from-sip-external
RFC3581

DTMF:

rfc2833

Qualify:

Use ClientCode:

No

Progress inband:

Yes

Language:
MOH Interpret:

(Defaults to English)
default

MOH Suggest:
Voice Mail Extension: *97
* SIP .
trixbox1*CLI> sip debug

32

 IP

SIP Debugging enabled

* debugging ,
trixbox1*CLI> sip set debug off
SIP Debugging Disabled
* debugging
trixbox1*CLI> sip show users
Username

Secret

6667

b**

6666

g*****

4918683

y******

4918655

**h****u

3542755

**2***s

Def.Context

ACL NAT

from-internal No Always
from-internal No Always
from-pstn
from-pstn
from-pstn

No RFC3581
No RFC3581
No RFC3581

204

2041

from-internal No RFC3581

203

2031

from-internal No Always

202

2021

from-internal No Always

201

2011

from-internal No Always

200

2001

from-internal No Always

1291017

4******

1112

te******

1111

sofstroi

1081566

***31***

from-pstn

No RFC3581

from-internal Yes RFC3581

from-internal No RFC3581
from-pstn

No RFC3581

* ITSP

33

 IP

,
, PBX/PBX Settings.
. , PHP
64Mb 100Mb /etc/php.ini.

memory_limit = 100M
apachectl restart.

. ,
IP .
FreePBX ,
:
8 extensions/trunks have weak secrets
Warning: The use of weak SIP/IAX passwords can compromise this system resulting in
toll theft of your telephony service. You should change the reported devices and trunks
to use strong secrets.
Extension: 200 / Secret less than 6 digits
Extension: 201 / Secret less than 6 digits
Extension: 202 / Secret less than 6 digits
Extension: 203 / Secret less than 6 digits
Extension: 204 / Secret less than 6 digits
,
200 204, . -
,
brute-force .

Asterisk Manager
PBX/PBX Settings,
:
Default Asterisk Manager Password Used

34

 IP

Asterisk
, :
/etc/asterisk/manager.conf

/etc/amportal.conf
amp111. .
/etc/asterisk/manager.conf :
secret = amp111
/etc/amportal.conf :
AMPMGRPASS=amp111
, - FreePBX MySQL. , web
phpMyAdmin
System/phpMyAdmin. asterisk
freepbx_settings. keyword AMPMGRPASS,
value defaultval .

. 11.
phpMyAdmin

35

 IP

amp111
:
/etc/asterisk/extensions_additional.conf
/etc/asterisk/phpagi.conf
/var/www/html/admin/libraries/freepbx_conf.class.php
/var/www/html/admin/modules/framework/libfreepbx.install.php
/var/www/html/admin/modules/framework/htdocs/admin/libraries/freepbx_conf.class.php
/var/www/html/framework/modules/trixbox/libraries/Trixpbx.php
Asterisk :
[trixbox1.localdomain etc]# amportal restart

ARI
PBX/PBX Settings,
:
Default ARI Admin password Used
ARI
:
/var/www/html/recordings/includes/main.conf.php

/etc/amportal.conf
- FreePBX, MySQL,
phpMyAdmin asterisk freepbx_settings
keyword ARI_ADMIN_PASSWORD, value
defaultval .

36

 IP

. 12. ARI phpMyAdmin

, , :
/var /www/html/admin/libraries/ freepbx_conf.class.php
/var/www/html/admin/modules/framework/var libfreepbx.install.php
/var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php

MySQL
MySQL,

/etc/amportal.conf
amp109. , AMPDBPASS=.
,
/etc/asterisk/cdr_mysql.conf
/etc/asterisk/res_mysql.conf ( )
,
:
/etc/freepbx.conf

( )

37

 IP

/etc/asterisk/extensions_additional.conf
/var /www/html/maint/modules/cdrreport/config/database.php
/var /www/html/admin/libraries/freepbx_conf.class.php
/var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php
/var /www/html/framework/system/config/database.php
/var /www/html/framework/modules/trixbox/libraries/Trixpbx.php

asteriskuser
MySQL. phpMyAdmin
System/phpMyAdmin. Server: localhost,
, , Privileges, Edit
Privileges, asteriskuser. Change password
.
MySQL, - reboot
.

root MySQL
root MySQL - ,
- PBX- .
, .
trixbox, . , root
MySQL
, root,
localhost,
CentOS.
passw0rd.
:
[trixbox1.localdomain etc]# mysqladmin -u root -p'passw0rd' password 'novapassXXX'

:
/etc/asterisk/cbmysql.conf

38

 IP

/var/www/html/maint/modules/phpmyadmin/config.inc.php
/var/www/html/web-meetme/trixbox-files/cbmysql.conf
/var/www/html/web-meetme/lib/defines.php
/var/www/html/web-meetme/lib/database.php

39

 IP

/var/www/html/aastra/asterisk/sugarCRM.php
/var/www/html/xmlservices/include/xmlservices_libs.php
, MySQL root
,
localhost.localdomain. phpMyAdmin,
Settings/phpMyAdmin web ,
-.

. 13. root ,
phpMyAdmin

root
root
- . CentOS
:
[trixbox1.localdomain ~]# passwd
Changing password for user root.
New UNIX password:
BAD PASSWORD: it is based on a dictionary word
Retype new UNIX password:
passwd: all authentication tokens updated successfully.

40

 IP

, .

maint
:
[trixbox1.localdomain ~]# passwd-maint
------------------------------------------Set password for AMP web GUI and maint GUI
User: maint
-------------------------------------------

New password:
Re-type new password:
Updating password for user maint
maint .

Web-Meetme
- ,
[trixbox1.localdomain ~]# passwd-meetme
- ,
HTTP. trixbox, .
, Web MeetMe. ,
:
User: wmm@localhost
Password: wmmpw
,
/ .
, .

41

 IP

. 14. Web-MeetMe

FOP
- :
/etc/amportal.conf
# Default Value: passw0rd
FOPPASSWORD=passw0rd
, ,
- :
/var/www/html/admin/libraries/freepbx_conf.class.php
/var /www/html/admin/modules/framework/ libfreepbx.install.php
/var /www/html/admin/modules/framework/htdocs/admin/libraries/ freepbx_conf.class.php
/var /www/html/framework/modules/trixbox/libraries/ Trixpbx.php
web , System/phpMyAdmin
asterisk, freepbx_settings ,
FOPPASSWORD keyword.

42

 IP

. 15. FOP phpMyAdmin

, .
, brute-force
SIP .
HTTP, PBX/Config File Editor.

. 16. Asterisk web

sip_general_custom.conf :

43

 IP

alwaysauthreject=yes
update , Asterisk,
:
[trixbox1.localdomain ~]# asterisk r
trixbox1*CLI> reload

, .

fail2ban
(SIP brute-force)
Python fail2ban.
:
http://www.necits.com/misc/fail2ban.pdf

SourceForge, :
http://sourceforge.net/projects/fail2ban/

1. :
[trixbox1.localdomain ~]# cd /usr/src
[trixbox1.localdomain ~]# wget http://garr.dl.sourceforge.net/project/fail2ban/fail2banstable/fail2ban-0.8.4/fail2ban-0.8.4.tar.bz2
[trixbox1.localdomain src]# tar -jxf fail2ban-0.8.4.tar.bz2
[trixbox1.localdomain src]# cd fail2ban-0.8.4
[trixbox1.localdomain fail2ban-0.8.4]# python setup.py install
[trixbox1.localdomain fail2ban-0.8.4]# cp files/redhat-initd /etc/init.d/fail2ban
[trixbox1.localdomain fail2ban-0.8.4]# chmod 755 /etc/init.d/fail2ban
2. fail2ban: ,
Asterisk.

44

 IP

[trixbox1.localdomain fail2ban-0.8.4]# cd /etc/fail2ban/filter.d

[trixbox1.localdomain filter.d]# touch asterisk.conf
/etc/fail2ban/filter.d/asterisk.conf (.
nano mcedit, Midnight Commander),
:
[trixbox1.localdomain filter.d]# nano /etc/fail2ban/filter.d/asterisk.conf
# Fail2Ban configuration file
#
#
# $Revision: 250 $
#
[INCLUDES]
# Read common prefixes. If any customizations available -- read them from
# common.local
#before = common.conf
[Definition]
#_daemon = asterisk
# Option: failregex
# Notes.: regex to match the password failures messages in the logfile. The
#

host must be matched by a group named "host". The tag "<HOST>" can

be used for standard IP/hostname matching and is only an alias for

(?:::f{4,6}:)?(?P<host>\S+)

# Values: TEXT
#
failregex = NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Wrong password
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - No matching peer found
NOTICE.* .*: Registration from '.*' failed for '<HOST>' - Username/auth name mismatch

45

 IP

NOTICE.* <HOST> failed to authenticate as '.*'$

NOTICE.* .*: No registration for peer '.*' (from )
NOTICE.* .*: Host failed MD5 authentication for '.*' (.*)
# Option: ignoreregex
# Notes.: regex to ignore. If this regex matches, the line is ignored.
# Values: TEXT
#
ignoreregex =

*:
, .
/etc/fail2ban/jail.conf,
IP 3 (sendmail-whois
email ,
):
[trixbox1.localdomain filter.d]# nano /etc/fail2ban/jail.conf
[asterisk-iptables]
enabled = true
filter = asterisk
action = iptables-allports[name=ASTERISK, protocol=all]
sendmail-whois[name=ASTERISK, dest= root, sender=fail2ban@localhost]
logpath = /var/log/asterisk/full
#logpath = /var/log/messages
maxretry = 5
bantime = 259200
( /var/log/messages )

46

 IP

*: IP , ,
/etc/fail2ban/jail.conf, [DEFAULT] (
):
ignoreip = 127.0.0.1 192.168.50.104 192.168.50.101
, iptables ssh,
http, ftp.
[ssh-iptables]
enabled = enable
Asterisk fail2ban.
[trixbox1.localdomain fail2ban-0.8.4]# nano /etc/asterisk/logger.conf
:
[general]
dateformat=%F %
[logfiles]
syslog.local0 => notice

Asterisk logger :
[trixbox1.localdomain fail2ban-0.8.4]# asterisk -rx "logger reload"
[trixbox1.localdomain share]# /etc/init.d/iptables start
[trixbox1.localdomain share]# /etc/init.d/fail2ban start
Starting fail2ban:

[ OK ]

[trixbox1.localdomain share]# chkconfig iptables on

[trixbox1.localdomain share]# chkconfig fail2ban on
*: fail2ban-server .
:
[trixbox1.localdomain fail2ban]# /etc/init.d/fail2ban restart

47

 IP

iptables
:
[trixbox1.localdomain fail2ban]# netstat -na
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address

Foreign Address

State

tcp

0 0.0.0.0:6600

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:3306

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:139

0.0.0.0:*

LISTEN

tcp

0 127.0.0.1:11211

tcp

0 0.0.0.0:5038

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:111

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:852

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:21

0.0.0.0:*

tcp

0 127.0.0.1:25

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:4445

0.0.0.0:*

LISTEN

tcp

0 0.0.0.0:445

0.0.0.0:*

LISTEN

tcp

0 127.0.0.1:52889

127.0.0.1:5038

ESTABLISHED

tcp

0 127.0.0.1:52887

127.0.0.1:5038

ESTABLISHED

tcp

0 127.0.0.1:36340

127.0.0.1:6600

ESTABLISHED

tcp

0 127.0.0.1:5038

127.0.0.1:52887

ESTABLISHED

tcp

0 127.0.0.1:5038

127.0.0.1:52889

ESTABLISHED

tcp

0 127.0.0.1:6600

127.0.0.1:36340

ESTABLISHED

tcp

0 :::80

:::*

LISTEN

tcp

0 :::22

:::*

LISTEN

tcp

0 :::443

:::*

LISTEN

tcp

52 ::ffff:192.168.50.108:22 ::ffff:192.168.50.104:55417 ESTABLISHED

0.0.0.0:*

LISTEN

LISTEN

48

 IP

udp

0 192.168.50.108:137

0.0.0.0:*

udp

0 0.0.0.0:137

udp

0 192.168.50.108:138

udp

0 0.0.0.0:138

udp

0 0.0.0.0:52789

0.0.0.0:*

udp

0 0.0.0.0:5060

0.0.0.0:*

udp

0 0.0.0.0:68

0.0.0.0:*

udp

0 0.0.0.0:69

0.0.0.0:*

udp

0 0.0.0.0:44365

udp

0 0.0.0.0:846

0.0.0.0:*

udp

0 0.0.0.0:849

0.0.0.0:*

udp

0 0.0.0.0:4569

0.0.0.0:*

udp

0 0.0.0.0:5353

0.0.0.0:*

udp

0 0.0.0.0:111

0.0.0.0:*

udp

0 192.168.50.108:123

udp

0 127.0.0.1:123

udp

0 0.0.0.0:123

udp

0 fe80::20c:29ff:fea8:123

udp

0 ::1:123

:::*

udp

0 :::123

:::*

0.0.0.0:*
0.0.0.0:*
0.0.0.0:*

0.0.0.0:*

0.0.0.0:*
0.0.0.0:*
0.0.0.0:*
:::*

( netstat plant)
, TCP 6600 (HUDserver), 3306 (MySQL), 139
(NetBIOS/Samba), 111 (portmap), 852 (rpc.statd), 21 (FTP), 4445 (FOP2), 445 (Samba), 80
(HTTP), 22 (SSH), 443 (HTTPS), UDP 137 (NetBIOS/Samba), 138 (NetBIOS/Samba),
52789 (rtp), 68 (BootPC), 69 (TFTP), 44365, 846 (rpc), 849 (rpc), 4569 (IAX), 5353 (mDNS), 111
(SunRPC), 123 (NTP) .

49

 IP

NAT
IP ,
:
*TCP 2527 (MGCP)
*TCP 2727 (MGCP)
*TCP 6600 (HUDserver)
TCP 4445 (FOP,
/var/www/html/panel/op_server.cfg, ;listen_port=)
*TCP 22 (SSH, /etc/ssh/sshd_config)
UDP 5060-5061 (SIP)
UDP 10,000 - 20,000 (RTP)
*UDP 4569 (IAX)
*UDP 2427 (MGCP)
*UDP 2727 (MGCP)
UDP 68 (BootPC) -
UDP 69 (TFTP) - firmware
UDP 123 (NTP) -

/ apache web :
/etc/httpd/conf/httpd.conf Listen 80 #Listen 80
/etc/httpd/conf.d/ssl.conf Listen 443 Listen XXXXX
<VirtualHost_default_:443> <VirtualHost_default:XXXXX>/

, paste-
:
MY_IP="192.168.50.108"
IPT="/sbin/iptables"

50

 IP

$IPT -F
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 21 -j DROP
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 111 -j DROP
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 139 -j DROP
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 445 -j DROP
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 852 -j DROP
$IPT -I INPUT -p tcp -s ! $MY_IP/32 --dport 3306 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 111 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 137 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 138 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 846 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 849 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 4569 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 5353 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 44365 -j DROP
$IPT -I INPUT -p udp -s ! $MY_IP/32 --dport 52789 -j DROP
$IPT -I INPUT -s 127.0.0.0/24 -j ACCEPT
/etc/init.d/iptables save

,
, paste- ,
:
#!/bin/bash
LO_IFACE="lo"
INET_IP="192.168.50.108"

SSH=22

51

 IP

DNS=53
BOOTPC=68
TFTP=69
WEB=80
NTP=123
SSL_WEB=443
FOP=4445
IAX2=4569
SIP=5060
SIPS=5061
HUD=6600
MGCP1=2427
MGCP2=2727
RTP=10000:20000

IPT="/sbin/iptables"
$IPT -F
$IPT -A INPUT -p ALL -i $LO_IFACE -j ACCEPT
for port in $SSL_WEB $SSH $IAX2 $WEB $FOP $HUD $MGCP1 $MGCP2
do
$IPT -A INPUT -p TCP -d $INET_IP --destination-port $port -j ACCEPT
done
for port in $DNS $BOOTPC $TFTP $NTP $IAX2 $SIP $MGCP1 $MGCP2 $RTP $SIPS
do
$IPT -A INPUT -p udp -d $INET_IP --destination-port $port -j ACCEPT
done

52

 IP

$IPT -A INPUT -p tcp -m tcp -d $INET_IP -j DROP

/etc/init.d/iptables save

iptables :
[trixbox1.localdomain ~]# iptables nvL

,
SIP , fail2ban :

/ :
[trixbox1.localdomain ~]# nano /usr/local/bin/check_sip_attack
paste-, Ctrl+O nano, Enter
Ctrl+X
crontab-, 5 :
[trixbox1.localdomain ~]# nano /var/spool/cron/root
Paste- :
01-59/2 * * * * /usr/local/bin/check_sip_attack
Ctrl+O, Enter, Ctrl+X
[trixbox1.localdomain ~]# killall -HUP crond
/
:
###############################################
######

#!/bin/bash
#crontab -l
# in Crontab:
#01-59/2 * * * * /usr/local/bin/check_sip_attack

53

 IP

PATH=${PATH}:/usr/sbin
BINDIR=`dirname $0`; echo $BINDIR | grep \^\/ > /dev/null ||
BINDIR=`pwd`/`dirname $0`
arch=`uname -m`-`uname -s`
mach=`hostname`
# echo BINDIR= ${BINDIR}
cd /var/log/asterisk
log=full
if [ ! -r ${log} ]; then
printf could not read error file (${log})\n
else
start=`grep -n -e CRON\:\ start ${log} | tail -n -1 | sed s/\:/\ /g | awk
{print $1}`
stop=`grep -n -e CRON\:\ stop ${log} | tail -n -1 | sed s/\:/\ /g | awk
{print $1}`
if [ "$start" = "" ]; then start=0; fi
if [ "$stop" = "" ]; then stop=0; fi
if [ "$start" -le "$stop" ]; then
error=`tail -n +${stop} ${log} | grep -i Registration | grep -i Failed | tail n +1`
if [ \! \( "x$error" = "x" \) ]; then
printf \n\nCRON: start sending info `date`\n\n >> ${log}
ccc=`printf %s $error | wc -l | awk {print $1}`
if [ $ccc -gt 0 ]; then
printf EXCERPT FROM ASTERISK LOG FILE ${log}:\n\n%s\n\nDONE.\n\n
$error
printf %s $error > /tmp/sipappatck.tmp
for ip in `cat /tmp/sipappatck.tmp | awk {print $11} | sort | uniq | sed
s/\//g` ; do
echo iptables -I INPUT -s $ip -j DROP
/sbin/iptables -I INPUT -s $ip -j DROP
done
fi
printf \n\nCRON: stop info sent `date`\n\n >> ${log}
fi
fi
fi
exit 0
# end
###############################################
######

54

 IP

trixbox
, . FreePBX
(
Asterisk,
Tools), - , :

Extensions
Fax Configuration
Feature Codes
Outbound Routes
Trunks
Inbound Routes
Announcements
Blacklist
CallerID Lookup Sources
Directory
Follow Me
IVR
Queues
Ring Groups
Time Conditions Time Groups
Callback
Conferences
DISA
Misc Applications Misc Destinations
Music On Hold
PIN Sets
System Recordings
VoiceMail Blasting
Asterisk SIP Settings
End Point Configuration Advanced Settings
Asterisk Logfiles
Asterisk Info

55

 IP

Asterisk Phonebook
Backup & Restore
Print Extensions
Route Congestion Messages
Customer DB
Inventory

PSTN SIP
PSTN , SPA-3102
Linksys, 1FXS 1FXO . FXO
PBX-, SIP .

. 17. Linksys SPA-3102 FXS/FXO ATA

, .
SPA-3102 , IP
, -.

56

 IP

. 18. SPA-3102

web Admin login

advanced (, ). ,
Voice/PSTN Line.
:

Line Enable:

yes

NAT Settings
NAT Mapping Enable:

no

NAT Keep Alive Enable:

yes

$NOTIFY
$PROXY
NAT Keep Alive Msg:
NAT Keep Alive Dest:
, PBX-
Nat Mapping: no.

SIP Settings
SIP Transport:

UDP

SIP Port:

SIP 100REL Enable:

no

EXT SIP Port:

Proxy and Registration

5061

57

 IP

Proxy:

192.168.50.108

Outbound Proxy:

192.168.50.108

Use Outbound Proxy:

no

Use OB Proxy In Dialog:

yes

Register:

yes

Make Call Without Reg:

yes

Register Expires:

3600

Ans Call Without Reg:

yes

Use DNS SRV:

no

DNS SRV Auto Prefix:

no

IP PBX-, Outbound Proxy. SIP

5061, DNS SRV .
Subscriber Information
Display Name:

BTC Line

User ID:

6667

Password:

*************

Use Auth ID:

no

6667
Auth ID:
, user ID, Auth ID.

Audio Configuration
Preferred Codec:

G711a

Silence Supp Enable:

no

Use Pref Codec Only:

no

Echo Canc Enable:

yes

G729a Enable:

yes

Echo Canc Adapt Enable:

yes

G723 Enable:

yes

Echo Supp Enable:

yes

G726-16 Enable:

yes

FAX CED Detect Enable:

yes

G726-24 Enable:

yes

FAX CNG Detect Enable:

yes

G726-32 Enable:

yes

FAX Passthru Codec:

G711u

G726-40 Enable:

yes

FAX Codec Symmetric:

yes

DTMF Process INFO:

yes

FAX Passthru Method:

NSE

DTMF Process AVT:

yes

DTMF Tx Method:

INFO

DTMF Tx Mode:

Strict

DTMF Tx Strict Hold Off

Time:

40

Release Unused
Codec:

yes

FAX Process NSE:

yes

yes
no
Symmetric RTP:
FAX Disable ECAN:
. FAX
G711a. DTMF SIP INFO.

VoIP-To-PSTN Gateway Setup

58

 IP

VoIP-To-PSTN Gateway
Enable:

yes

VoIP PIN Max Retry:

Line 1 VoIP Caller DP:

VoIP Caller Auth

Method:

none

One Stage Dialing:

yes

VoIP Caller Default

DP:

none
Line 1 Fallback DP:
VoIP-To-PSTN, Caller Auth none,
pin max retry 3, one stage dialing yes.

PSTN-To-VoIP Gateway Setup

PSTN-To-VoIP Gateway
yes
Enable:

PSTN Caller Auth

Method:

PSTN Ring Thru Line 1:

no

PSTN PIN Max Retry:

PSTN CID For VoIP CID:

yes

PSTN CID Number

Prefix:

PSTN Caller Default DP:

Off Hook While Calling

VoIP:

Line 1 Signal Hook Flash To

PSTN:

Disabled

none
3

no

PSTN CID Name

Prefix:

PSTN-To-VoIP yes Caller

Auth none.
FXO Timer Values (sec)
VoIP Answer Delay:

VoIP PIN Digit Timeout:

10

PSTN Answer Delay: 3

PSTN PIN Digit Timeout: 10
FXO 3 PSTN Answer Delay.

59

 IP

trixbox :

. 19.
PBX/PBX Settings/Trunks Add SIP Trunk. ,
CallerID , 1,
( -) ,
XXXXXXXXXXX. - FreePBX,
83XXXXXXXXXXXXX.
BTC_linksys. peer- :
disallow=all
allow=alaw&g729&g723
canreinvite=no
context=from-trunk
dtmfmode=info
host=dynamic
incominglimit=1
nat=never

60

 IP

port=5061
qualify=yes
secret=btc111
type=friend
username=6667
fromuser=6667
USER context USER details .
___________________________________________________________________
*: - SIP :
Outgoing Settings:
PEER Details:
context=from-trunk
host=PROVIDER.HOSTNAME
qualify=yes
nat=no
type=peer
insecure=invite
disallow=all
allow=g729&g723&alaw
username=USERNAME
secret=SECRET

Register String:
USERNAME:SECRET@PROVIDER.HOSTNAME/DID
___________________________________________________________________

Outbound Routes Add Route,

, MOH
(
),

61

 IP

( 83), match patter

. ( )
BTC_linksys. - FreePBX
:
83|.
(| ).
Pin Set, - FreePBX
PIN Sets, PIN-,
.

. 20. SPA-3102
Asterisk PSTN
.

62

 IP

. 21. SPA-3102 PBX-

FXS ,
trixbox .
,
extension. PBX/PBX Settings Extensions/Add extension/General SIP
device :
User Extension: 6667
Display Name: SPA-3102
Secret: btc111
Dtmfmode: SIP INFO
Canreinvite: no
Context: from-internal
Host: dynamic
Type: friend
Nat: No

63

 IP

Port: 5061
Qualify: yes
: Outbound Concurrency Limit (
), Call Waiting ( ), Pinless Dialing
( PIN PSTN PBX).
,
-, .

GSM SIP
trixbox-GSM, VoIP
GoIP ( Hybertone Technology, Co. Ltd http://hybertone.com
DBL Technology Co., Ltd http://dbltek.com),
( $150 ) Ebay.

. 22. GoIP GSM

GSM
, . SIP.
H.323 ,
firmware-. 1- , 2, 4
8 GSM .
trixbox :

64

 IP

. 23. GSM
, GoIP_Vivacom. CID
hidden, 1 , 880,
XXXXXXXXXXXXX. :

Trunk Name:
PEER Details:
username=6666
fromuser=6666

GoIP Vivacom

65

 IP

authuser=6666
type=peer
secret=gsmrulez
host=192.168.50.114
port=5060
Qualify=yes
dtmfmode=rfc2833
insecure=port, invite
canreinvite=yes
context=from-internal
nat=yes
allow=g729&g723&alaw
Incoming Settings
USER Context:

6666

USER Details:
username=6666
fromuser=6666
authuser=6666
type=user
secret=gsmrulez
host=192.168.50.114
port=5060
dtmfmode=rfc2833
qualify=yes
insecure=port,invite

66

 IP

canreinvite=yes
context=from-internal
nat=yes
allow=g729&g723&alaw
Registration
Register String:
6666:gsmrulez@192.168.50.114/6666

Submit Changes

Duplicate Trunk

Extensions 6666 :

Display Name

GoIP GSM

This device uses sip technology.

secret

gsmrulez

RFC 2833

dtmfmode

No

canreinvite
context

from-internal

host

dynamic

trustrpid

Yes

sendrpid

No

67

 IP

friend

type

Yes

nat
port

5060

qualify

yes

callgroup
pickupgroup
disallow

all

allow

g729&g723&alaw

dial

SIP/6666

accountcode
mailbox

6666@device

vmexten
deny

0.0.0.0/0.0.0.0

permit

0.0.0.0/0.0.0.0

Outbound route :

68

 IP

. 24.
Dial Patterns that will use this Route

)+

)+

880

|[

|[

Trunk Sequence for Matched Routes

GoIP Vivacom

,
IVR- ,
Inbound route , :

69

 IP

. 25. GoIP GSM

Description:

Viva2

DID Number:

6666

Caller ID Number:
French

Music On Hold:
Signal RINGING:
Fax Detect

Detect Faxes:

No

Yes

70

 IP

Set Destination

IVR

IVR1

GSM ,
..,
. , GoIP
.
( , , IP LAN PC ,
SMS info SIM )
, :

. 26. SIP GoIP GSM

* , ,
SIP .

71

 IP

, . ,
G729, G723 aLaw,
. jitter buffer , -
NAT STUN .

. 27. PSTN-to-VoIP VoIP-to-PSTN GoIP GSM

Forward to PSTN Forward to VoIP
XXXXXXXXXX:. Forward Number PSTN to
VoIP PBX ,
.
,
SIM Card Expiry, SIM
Card Billing Time. , SMS ,
SIM Card State Report Number,
- SIM Card State Report
Time.
, ,
gain.html - ( ,
-, , DTMF
):

72

 IP

. 28. GoIP GSM -

ITSP
ITSP , VoiceMail,
Conference Bridge, Follow Me, DID
. , SIP, Asterisk
, , .
Fonality, - ITSP:

CallWithUs
CBeyond
FonSWITCH
VoicePulse - Download auto-config module from their account center
Vitelity Communications
Callcentric
Callcentric Inbound
JustVoip.com
Musimi.dk
Onfone.dk
Ruskom (rk1.ru)
sipgate.co.uk
sipgate.de
telsome.es
Voipbuster.com
VoipCheap.com
vono.net.br (BR)
Unlimitel Trunk Settings

ITSP :
http://fonality.com/trixbox/wiki/trixbox-ce-trunk-setup

73

 IP

, IPPN.
PBX/PBX Settings/Trunks Add SIP Trunk

. 29. SIP
:

74

 IP

Trunk Name:

IPPN

Outbound Caller ID:

024918655

CID Options:

Allow Any CID

Maximum Channels:

*024918655 ,
Dialed Number Manipulation Rules

)+

)+

81

XXXXXXXXXXXX

*81 , ,
.
Trunk Name:

IPPN

PEER Details:
username=024918655
type=peer
qualify=yes
secret=**********
nat=auto
insecure=very
host=195.138.148.60
fromuser=024918655
fromdomain=195.138.148.60
dtmfmode=inband
INFO/)

(- rfc2833 info /SIP

75

 IP

context=from-trunk
disallow=all
allow=g729&g723&alaw

(, )

Incoming Settings
USER Context:

4918655

USER Details:
username=024918655
type=user
secret=***********
nat=auto
insecure=very
host=195.138.148.60
fromdomain=195.138.148.60
dtmfmode=inband
disallow=all
context=from-pstn
allow=g729&g723&alaw
Register String:
024918655:**********@195.138.148.60/024

. PBX/PBX Settings/Outbound Routes,
:

76

 IP

. 30.
Route Name:

9_outside

default

Music On Hold?
Time Group:

( )
PIN Set:
(a PIN )
Dial Patterns that will use this Route

)+

)+

81

|[
|[

77

 IP

81 ,
. match pattern
, . .
. - FreePBX,
:
81|.

Trunk Sequence for Matched Routes

IPPN

1
, ,
.

DID. (Inbound
Route), :

. 31.

78

 IP

Description:

IPPN_Viva

DID Number:

024918655

Caller ID Number:
(CallerID ,
)
Music On Hold:

French

Signal RINGING:
(MOH )
Detect Faxes:

No

Yes

( ,
)
Set Destination

IVR

IVR1

( , ;
, , ,
..)

PBX/PBX
Settings/Extensions.
, SIP .

79

 IP

. 32.
User Extension

1111

Display Name

Baj Blagoi

Outbound
Concurrency Limit

No Limit

( )
Call Waiting

Enable

Internal Auto Answer

Disable

( , - )
Call Screening

Disable

( , ,
)

80

 IP

Pinless Dialing

Disable

( PIN )
Assigned DID/CID

DID Description
Add Inbound DID
( )
Device Options

This device uses sip technology.

secret

sofstroi

RFC 2833

dtmfmode

No

canreinvite
context

from-internal

host

dynamic

trustrpid

Yes

sendrpid

No

type
nat

friend

No - RFC3581

81

 IP

port

50699

qualify

yes

dial

SIP/1111

accountcode
mailbox

1111@default

vmexten
Deny

0.0.0.0/0.0.0.0

Permit

0.0.0.0/0.0.0.0

Default Group Inclusion

Default Directory

Include

Default Page Group

Include

( )
Dictation Services

Dictation Service
Dictation Format
Email Address

Enabled

Ogg Vorbis

baiblagoi@c0z.org

( dictation)

82

 IP

Fax

Enabled
Fax Email

baiblagoi@c0z.org

( )
Recording Options

Record Incoming

Alw ays

Record Outgoing

On Demand

( )
Voicemail & Directory

Status

Enabled

Voicemail Password

1111

Email Address

blagoi@c0z.org

Pager Email Address

blagoi@c0z.org

Email Attachment

yes

no

Play CID

yes

no

Play Envelope

yes

no

Delete Voicemail

yes

no

83

 IP

( ,
trixbox, ,
)
End Point Manager

MAC Address
Brand
Model
Line
Template
( - , End Point
Manager PBX/PBX Settings)
Optional Destinations
No Answer
Busy

Unavail Voicemail if Enabled

Extensions

Not Reachable

<1112> MizuPhone

Unavail Voicemail if Enabled

( ,
)

Follow Me
,
PBX-, Follow Me. .
:
Initial Ring Time:

10

Ring Strategy:

ringallv2

84

 IP

Ring Time (max 60 sec)

20

Follow-Me List:

810888269234#

(Initial Ring Time

Follow Me ,
,
Follow-Me List ,
# )
auto-created: custom/phone_rec_1111

Announcement:
Play Music On Hold?

French

(Announcement
Follow Me , MOH
)
:
Call Confirmation Configuration

Confirm Calls:
Remote Announce:

Default

Too-Late Announce:

Default

Change External CID Configuration

Mode:
Fixed CID Value:

Default

85

 IP

Destination if no answer:
Voicemail

<1111> Baj Blagoi (unavail)

(a ,
)

-,
Zoiper,
( .
MizuPhone MizuTech).
Options
Add new SIP account.
-:

86

 IP

. 33. Zoiper Biz

RFC-2833 DTMF .
Protocol options/SIP options SIP ,
, .. 5060.

. 34. SIP Zoiper

87

 IP

, ,
:

. 35. Zoiper
, G729, G711
alaw ( ), GoIP GSM
- . ,
Asterisk .
STUN NAT :

. 36. STUN
, :

88

 IP

. 37.
OK, PBX- :

. 38. Zoiper

Fax Configuration
. ,
G.711 (ulaw/alaw) .

89

 IP

Fax Presentation Options

Default Fax header:

Our Company

Default Local Station Identifier:

+35924918655

Outgoing Email address:

our_freepbx@gmail.com

Outgoing Email address ,

.
Fax Feature Code Options

Email address:

fax@ourcompany.com

,
.
Error Correction Mode:

Yes

Maximum transfer rate:

14400

Minimum transfer rate:

2400

No

,
.
, Inbound routes,
DID Fax Recipient
. ,
Detect Faxes: yes, PBX-
.
Description:

IPPN2

DID Number:

024918683

90

 IP

Fax Detect

Detect Faxes:

No

Yes

Set Destination
Fax Recipient

MizuPhone (1112)

IVR
,
666.

Feature Codes.
:
: *30
: *32
: *31
: *72
: *71
: **
: *2
: 7777
: *34
: *35
: *78 *79
: 666
: #
: *43
: *65

91

 IP

: *60
: *75
: *98
: *97
Misc Applications,
:
Edit Misc Application

Description:

DISA_internal

Feature Code:

*409

Feature Status:

Enabled

Destination:
DISA

VIVA Prima

*409,
, .

System
Recordings. IVR,
. Built-in Recordings
, Asterisk. ,
,
-.

92

 IP

. 39.

, :
1. ,
PCM 16Bits/8KHz.
2. , *77.
*99 .
3. ,
Save.

,
Announcements
. :
Add Announcement

Description:

Connecting

93

 IP

Welcome_msg_TEST

Recording

Repeat
Allow Skip
Return to IVR
Don't Answer Channel

Destination after playback:

Extensions

<204> Extension 5

,
204.

, Blacklist
FreePBX. /
.
Add or replace entry

Number:
Block Unknown/Blocked Caller ID:

CallerID
CallerID Lookup Sources /
, ,
ENUM, HTTP MySQL.
Asterisk .

94

 IP

( Directory)
, IVR. IVR-
, . ,
. .

. 40.
, ,
office-iguanas,
Demo_Announcement.
.
1111,
( Spell Name), 204
phone_rec_1111.

, IVR:

95

 IP

. 41. IVR
IVR Misc Application, :

. 42.
, *410,
IVR 1
.

96

 IP

IVR
IVR- .
,
, ,
.. ,
IVR.
http://www.i6net.com, VXI*, IVR
VoiceXML, ,
.. - IVR,
trixbox.

. 43. IVR

.
- . ,
IVR .
, 0.

97

 IP

. 44.
- :
CID Name Prefix:

Sales

98

 IP

( , .
)
Wait Time Prefix:

Yes

( ,
)
Static Agents:

204
1111

( , )
Dynamic Members:

1112,0

( , )
Agent Restrictions

No Follow -Me or Call Forw ard

( Follow-Me )
Ring Strategy:

ringall

( , , ,
..)
Skip Busy Agents:

Yes

( )
Music on Hold Class:

inherit

( , , inherit
)

99

 IP
None

Join Announcement:

( , .
)
Call Recording:

gsm

( )
Recording Mode:

After Answ ered

( )
Caller Volume Adjustment:

+2

Agent Volume Adjustment:

No Adjustment

( )
office-iguanas

Agent Announcement:
Report Hold Time:

Yes

(
, . ,
)
Caller Position Announcements

Frequency:

3 minutes

Announce Position:

Yes

Announce Hold Time:

No

( , )

100

 IP

IVR Break Out Menu:

Repeat Frequency:

Test_DIR

2 minutes, 45 seconds

( IVR
, . )

, ,
. , .. ,
IVR (. 606,
3). ring group -.

. 45. Ring Group 600

Time Groups Time Conditions ,
.
.
-.

101

 IP

. 46.

. 47. Time Condition,

, IVR1,
, phone_rec_1111 .

,
.

102

 IP

CallBack
Callback ,
. . ,
callback , :
Callback Description:

Test callba

Callback Number:
Delay Before Callback:

, ,
Caller ID
:
Description:

IPPN2

DID Number:

024918683

Caller ID Number:

087677009

Set Destination
Callback

Test callback

, 0876770093 024918683,

,
IVR1.

Conferences,
.
,
8500.
:
Conference Number:

8500

103

 IP

Conference Name:

conf room

User PIN:
Admin PIN:
( PIN )
Conference Options

conference-call

Join Message:
Leader Wait:

No

Talker Optimization:

Yes

Talker Detection:

No

Quiet Mode:

No

User Count:

Yes

User join/leave:

Yes

Music on Hold:

Yes

Music on Hold Class:

inherit

Allow Menu:

Yes

Record Conference:

Yes

Maximum Participants:
Mute on Join:

No Limit

No

104

 IP

, ,
,
..
DID ,

bridge-
.

DISA
DISA ,
,
. , :
DISA name:

Test

PIN
Response Timeout

20

Digit Timeout

Require Confirmation
Caller ID
Context

from-intern

Allow Hangup
PIN , . Caller ID
ID - . DISA
IVR CallBack .

(MOH)
Music On Hold , -
IVR, ,
.
.

105

 IP

. 48.

PIN
,
PIN . ,
-.

. 49.

106

 IP

,
PIN Set,
.
Record in CDR, PIN
.
.

VoiceMail Blasting
.

. 50.

,
, PBX-.
, :
PBX Settings/Endpoint Manager
PBX Settings/Tools/End Point Manager
o End Point Device List
o End Point Template Manager
o End Point Configuration
o End Point Advanced Settings

107

 IP

, .
- , ,
:

Aastra
Cisco
Grandstream
Linksys
Polycom
Snom

setup-aastra
setup-cisco
setup-grandstream
setup-linksys
setup-polycom
setup-snom

,
MAC .
. Trixbox firmware
, TFTP.
,
:
-

Backup
,
Backup & Retore, PBX/PBX
Settings/Tools. trixbox,
:
-

web

108

 IP

CDR




( , /etc, astdb)

:
-

FTP
SSH
Email

. 51.
, ,
,
, FTP .

Route Congestion Messages, PBX/PBX Settings/Tools
,
. ,

109

 IP

System Recordings.
, :
Standard Routes

Message or Tone

Default Message

Intra-Company Routes

Message or Tone

Default Message

Emergency Routes

Message or Tone

Default Message

Trunk Failures
No Answer

Message or Tone

Default Message

Number or Address Incomplete

Message or Tone

Default Message

Unallocated Number

Message or Tone

Default Message

110

 IP

,
.

Call Detail Record

CDR , , PBX-,
.
,
, ,
. PBX/CDR Report.

. 52. CDR Report

CDR PBX Settings/Reports.
,
, ,
.

111

 IP

. 53.

. 54.

112

 IP

. 55.

. 56.

, CDR
phpMyAdmin. .
CDR, PIN
0888269234. PIN

113

 IP

, .

. 57. CDR phpMyAdmin

, :
-

SIP Asterisk
Asterisk Info / , , , .
/
Asterisk Logfiles / log /
Asterisk

HUD server + client

, Fonality
-. HUD /
Asterisk, trixbox, Microsoft Office
. HUD
:

114

 IP

HUD
Call Parking Area
Call Parking drag & drop
Hold Area drag & drop
Call Transfer drag & drop
Detachable and Resizable Components
Color Coded Call Status
Transfer to Voicemail - self
Transfer to Voicemail others
Drag and Drop Outbound Calling
Extension Sorting name, number,
status
Presence Management
Click to Call Mobile Phones
Drag and Drop Calls to Mobile Phones
Click to Email
Outlook Integration Inbound contact
match
Enterprise Instant Messaging
Instant Messaging Chat History
Outlook Integration outbound dialing
On-the-fly Recording - self
On-the-fly Recording - others
CRM Integration browser screen pop
Call Barging (active)
Call Monitoring (passive)
Control Panel Access to Recordings
High Scalability
Group and User permissions
Extension Grouping

V
V
V
V
V
V
V
V
V
V

HUD
Lite
V
V
V
V
V
V
V
V
V
V

V
V
V
V
V

V
V
V
V
V

V
V
V
V
V
V
V
V
V
V
V
V

V
V
V
X
X
X
X
X
X
X
X
X

. 3. HUD
HUD ,
, chat
,
..
, HUD
:
http://www.hudlite.org/downloads.htm

115

 IP

HUD trixbox, Packages

hudlite-server tbm-hudadmin, :
[trixbox1.localdomain ~]# yum install hudlite-server tbm-hudadmin
PBX/HUDlite Admin,
, SIP .
HUD, sip,
, ,
. HUDlite Server
configuration .

. 58. HUD

116

 IP

. 59. HUD

web
trixbox,
.
,
, .

. 60.

117

 IP

. 61.
*97
, *98 .
,
/ .
web Voicemail and
Recordings ,
.
http://192.168.50.108/user/?vmrecs.
, :

118

 IP

. 62. web
playback ,
web . SIP,
Follow-Me (.
), .
,
!
.
Phone Features ,
, ,
,
, call screening,
,
.
Follow Me ,
, . Settings
, .
Settings ( /
), Call Monitoring , :

119

 IP

. 63. QuickTime
, Feature Codes
:

120

 IP

. 4.

FOP
Flash, :
-

drag & drop

(
),

121

 IP

. 64. FOP

Web-MeetMe
web ,
Web MeetMe,
http://192.168.50.108/user/?meetme.
web ,
, , PIN
.

122

 IP

. 65. Web MeetMe

. 66. Web MeetMe

123

 IP

Trixbox ,
,
. IP ,
,
,
, web , callback
. ,

.

124

 IP

Trixbox Documentation, http://fonality.com/trixbox/wiki/trixbox-documentation

Zoiper Softphone, http://www.zoiper.com/
Elastix :: Open Source Unified Communications Server, http://www.elastix.org/
List of SIP software, Wikipedia, http://en.wikipedia.org/wiki/List_of_SIP_software
HOWTOs fail2ban, http://www.fail2ban.org/wiki/index.php/HOWTOs
Fail2Ban (with iptables) And Asterisk, http://www.voipinfo.org/wiki/view/Fail2Ban+(with+iptables)+And+Asterisk

Unified Communications | Fonality Inc, http://www.fonality.com/enterprise-solutions/unifiedcommunications.html

Newtons Telecom Dictionary

125

 IP

AGI

Asterisk Gateway Interface, Asterisk

ARI

Asterisk Recording Interface,

ATA

Analog Telephone Adapter,

, . VoIP

Billing ,
BRI

Basic Rate Interface, ISDN, I.340 ITU. BRI

2 B- 64kbps 16kbps.

CallBack
,

CDR

Call Detail Record Call Data Record,

CID

Caller ID,

CRM

Customer Relationship Management, ,

,

DID

Direct Inward Dialing, IVR,

..

DISA

Direct Inward System Access, ,

Fax

Facsimile

FOP

Flash Operator Panel

FXO

Foreign Exchange Office, ,

FXS

Foreign Exchange Station, . FXO

Gate

Gateway,

GPL

General Public License,

H.323 ITU-T, -

126

 IP
IAX

Inter Asterisk Exchange, Asterisk PBX,

IP

Internet Protocol

ISDN

Integrate Services Digital Network, ITU-T

, ,

ITSP

Internet Telephony Service Provider,

IVR

Interactive Voice Response,

MAC

Media Access Control

MGCP Media Gateway Control Protocol, VoIP

MOH

Music On Hold

NAT

Network Addres Translation

OEM

Original Equipment Manufacturer

PBX

Private Branch eXchange,

PIN

Personal Identification NumberPKI

PRI

Primary Rate Interface, ISDN T1 (23BRI + Data)

PSTN

Public Switched Telephone Network, ITU-T

SIP

Session Initiation Protocol, VoIP

SoftPhone

SS7

Signaling System 7, , PSTN

TFTP

Trivial File Transfer Protocol

VoIP

Voice over IP

127