Re: Protecting asterisk from hackers
Paul Timms
7-29-20
From my own experience:

- You should clearly have a firewall running on the server hosting Asterisk.

- fail2ban should be installed and active

- Port 5038 (Asterisk Manager Interface) should only be open to the server running Standard ERP, if it's not on the same server.

- Port 5060 is the standard SIP client port, and is often attacked. It is recommended to change the SIP client port, however this is not currently possible in Standard ERP. This is registered as a wish and has been approved.

- Put a limit on the number of concurrent outgoing calls, a limit on the countries that can be called, and set a "per day" spending limit. This will prevent a hacker racking up a huge bill.
Leave Comment
You can subscribe to notifications for this post by selecting the 'star' icon on the top right corner of the post.
Latest Posts
Lilian Wanyoike
Hi, We have a customer who creates on account receipts against a customer account. Another team is required to allocate these receipts to specific invoice records. Prepayments will not work as t...
15:49 6 Oct 2025
Piotr Wycichowski
Hi! I am not able to run SERP client on Mac (Sonoma), when the folder is outside of Applications. When and why it happens? I know, that some users with the same system haven't such problem. ...
14:54 19 Sep 2025