[App_rpt-users] Stepping on toes...

Loren Tedford lorentedford at gmail.com
Mon Jul 11 18:18:32 UTC 2016


Steve any idea how far we have gotten?? The security threat list is pretty
large at the moment..
https://www.cvedetails.com/vulnerability-list/vendor_id-6284/Asterisk.html

And honestly the above is probably for more current versions which mean
their are probably more threats out their than we really want to think
about..

All i know is we can't keep running on this version for ever well i don't
think we can.. I guess we may get to the point of apt pinning..

While i am being honest here.. We should probably one day update the
mailing list to more of a forum thread some where with actual details etc..
Mailing list seems to be abit old school just my thoughts..

Loren Tedford (KC9ZHV)
Phone:
Fax:
Email: lorentedford at gmail.com
Email: KC9ZHV at KC9ZHV.com
http://www.lorentedford.com
http://www.kc9zhv.com
http://forum.kc9zhv.com
http://hub.kc9zhv.com
http://Ltcraft.net <http://ltcraft.net/>

On Mon, Jul 11, 2016 at 1:12 PM, Steve Zingman <szingman at msgstor.com> wrote:

> Time, Energy, drive, people. Just to name a few.
>
>
> On 7/11/2016 2:08 PM, Loren Tedford wrote:
>
> Ok so what are missing to get the development started on a more current
> version of asterisk?? Lets face it 1.4.23 went out of professional service
> back in like 2010...
>
> Just saying we really need to start thinking more about the future now
> rather than waiting till we have mass issues across the board..
>
> Loren Tedford (KC9ZHV)
> Phone:
> Fax:
> Email:  <lorentedford at gmail.com>lorentedford at gmail.com
> Email:  <KC9ZHV at KC9ZHV.com>KC9ZHV at KC9ZHV.com
> <http://www.lorentedford.com/>http://www.lorentedford.com
> <http://www.kc9zhv.com/>http://www.kc9zhv.com
> <http://forum.kc9zhv.com/>http://forum.kc9zhv.com
> <http://hub.kc9zhv.com/>http://hub.kc9zhv.com
> http://Ltcraft.net <http://ltcraft.net/>
>
> On Mon, Jul 11, 2016 at 1:05 PM, Steve Zingman <szingman at msgstor.com>
> wrote:
>
>> It's going to taker a LOT of work to change versions of Asterisk. That's
>> not to say it will not happen.
>> I can't re-create you crashes.
>> I firewall my boxes to only allow access from trusted addresses for ssh.
>> I use a VPN for roaming users. I don't support SIP.
>>
>>
>> On 7/11/2016 2:02 PM, Loren Tedford wrote:
>>
>> I suppose while we are stepping on toes I want to ask about the proper
>> way of securing a dial box from our wonderful hackers out their.. Been
>> using ufw and fail2ban but found out recently nothing is invincible.. any
>> thoughts?? By the way any progress on asterisk crashes?? I can't find a
>> reason for the crashes in the logs..
>>
>> Also what is the status on updating asterisk to a more current version??
>> Any issues with that??
>>
>> Loren Tedford (KC9ZHV)
>> Email: lorentedford at gmail.com
>> Phone:
>> Fax:
>> http://www.lorentedford.com
>> http://kc9zhv.com
>>
>> Sent from Droid Turbo from Verizon wireless network
>> On Jul 11, 2016 12:34 PM, "Steve Zingman" <szingman at msgstor.com> wrote:
>>
>>> Yes,
>>> I've seen it before. Ramesh asked the question here and a couple of us
>>> had some questions as to his configuration. I think he is in process of
>>> gathering info so we can trouble shoot more.
>>> I't not hard to get lists confused.
>>>
>>> Steve
>>>
>>> On 7/11/2016 1:30 PM, DuaneVT . wrote:
>>>
>>> Thanks Steve. You have helped me several times here I believe. Perhaps
>>> it was the ARM Allstar list I should have ranted to. As some posts get
>>> shared between lists, it is hard not to end up on another list.
>>> Here is an example. I felt for the questioner...
>>> "Message: 3
>>> Date: Sun, 10 Jul 2016 09:53:39 -0400
>>> From: Doug Crompton < <doug at crompton.com>doug at crompton.com>
>>> To: ARM Allstar < <arm-allstar at hamvoip.org>arm-allstar at hamvoip.org>
>>> Subject: Re: [arm-allstar] Using "A" and "B" audio outputs using the
>>>         DIAL Image on a RPi
>>> Message-ID: <BLU171-W25439CF444D3509E8F7BE5BA3E0 at phx.gbl>
>>> Content-Type: text/plain; charset="iso-8859-1"
>>>
>>> Ramesh,
>>>
>>>  This is NOT a dial list, ask elsewhere! It works fine on the
>>> hamvoip.org code.
>>> 73 Doug
>>> WA3DSP
>>> http://www.crompton.com/hamradio
>>>
>>>
>>> > To:  <arm-allstar at hamvoip.org>arm-allstar at hamvoip.org
>>> > Date: Sun, 10 Jul 2016 07:34:57 -0400
>>> > Subject: [arm-allstar] Using "A" and "B" audio outputs using the DIAL
>>> Image   on a RPi
>>> > From:  <arm-allstar at hamvoip.org>arm-allstar at hamvoip.org
>>> > CC:  <Ramesh at va3uv.com>Ramesh at va3uv.com
>>> >
>>> > Hi All:
>>> >
>>> > I am using the DIAL Image on a PRi 2; I would like to use the "A" and
>>> > "B" audio outputs from my fob (A for voice and B for PL), so that I can
>>> > inject them into separate points on my exciter.
>>> >
>>> > I was able to get 2 'discrete' audio outputs when running ACID on a PC.
>>> > This doesn't seem to be working with the Pi / DIAL.  Is anyone running
>>> > this configuration on a Pi?
>>> >
>>> > Thx,
>>> >
>>> > Ramesh.
>>> >
>>> > # 27919 and a truck load of others!
>>> ​"
>>>
>>> Sheesh, I want to help everyone....
>>> Thanks again until my next question HERE,
>>> Duane ​
>>>
>>> On Mon, Jul 11, 2016 at 1:06 PM, Steve Zingman < <szingman at msgstor.com>
>>> szingman at msgstor.com> wrote:
>>>
>>>> Duane,
>>>> When were you told on the App_rpt-users list to go elsewhere with DIAL
>>>> questions? DIAL is the official distribution for AllStar. Support questions
>>>> SHOULD be posted here. I know that other lists limit their support to THEIR
>>>> distribution and have curtly told DIAL users to go elsewhere for support. I
>>>> do not remember seeing your question on here. If I missed it, I'm sorry. I
>>>> TRY to help out with DIAL and general Asterisk questions when possible.
>>>>
>>>> 73, Steve N4IRS
>>>> INAD
>>>>
>>>> On 7/11/2016 12:42 PM, DuaneVT . wrote:
>>>>
>>>> I too have asked questions here concerning DIAL and been told curtly to
>>>> go elsewhere. As DIAL distros have all the files included and interface to
>>>> the FOBs and SBCs, where do we draw the line? I have followed all
>>>> instructions for installing the software and had fresh boot problems. It
>>>> was hard to tell where the problem was, but when I am new to Linux/DIAL and
>>>> the whole Allstar project, I looked for guidance where I found discussions.
>>>> There is an Allstar Link community on Google+, and you will see I have all
>>>> except 1 postings! Crickets.........
>>>> Perhaps the moderator/users here could post a list of URLs for
>>>> different aspects of AllStar Link so us Newbies would know where to hang
>>>> out.
>>>> I have had GREAT support from other listers here by direct email after
>>>> each post and I sincerely thank all who have taken an interest in someone
>>>> who has to learn as we all do.
>>>> 73,
>>>> Duane  KA1LM  #42996
>>>>
>>>>
>>>> _______________________________________________
>>>> App_rpt-users mailing listApp_rpt-users at ohnosec.orghttp://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>>
>>>> To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>>>> You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
>>>>
>>>>
>>>> --
>>>> "Anything is possible if you don't know what you are talking about."
>>>> 1st Law of Logic
>>>>
>>>>
>>>
>>> --
>>> "Anything is possible if you don't know what you are talking about."
>>> 1st Law of Logic
>>>
>>>
>>> _______________________________________________
>>> App_rpt-users mailing list
>>> App_rpt-users at ohnosec.org
>>> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>
>>> To unsubscribe from this list please visit
>>> <http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users>
>>> http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll
>>> down to the bottom of the page. Enter your email address and press the
>>> "Unsubscribe or edit options button"
>>> You do not need a password to unsubscribe, you can do it via email
>>> confirmation. If you have trouble unsubscribing, please send a message to
>>> the list detailing the problem.
>>>
>>
>> --
>> "Anything is possible if you don't know what you are talking about."
>> 1st Law of Logic
>>
>>
>
> --
> "Anything is possible if you don't know what you are talking about."
> 1st Law of Logic
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20160711/df2c476f/attachment.html>


More information about the App_rpt-users mailing list