<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>if you have ports exposed to the net, you will be probed, and occasionally flooded by attempts to crash your system(s). Mostly Chinese and eastern European actors. The current market, worldwide, for information security, is in the hundreds of billions of dollars being spent in research, development, analysis, etc. and there are currently, in the US, an estimated 500k job openings that are going unfilled; by 2020, it's estimated that number will grow to 1 MILLION open requisitions.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">Hopeless? No, but you have to be right 100% of the time...the thugs only have to be right once.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">What you're seeing is nothing new; since I entered the field in '88, the same patterns of activity have been going on, and what has developed is a lot of appliances and FUD being used to sell said appliances, but, the same types of issues are there.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">So...what to do?</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">1. Minimize the attack surface. Repeat the maxim "That which is not expressly permitted is prohibited" until it becomes second nature. Your boundary should be, as much as possible if you are providing services, statically configured. uPNP is there for the clueless so they can play xbox and watch tv on Sling. Turn it off. static IP inside, port forwarding strictly enforced. PITA? Yes. Just do it. keep records. the crooks do.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">2. Minimize attack surface on your systems. Stuff is cheap enough that, if you need multiple services (mail, Squid, app-rpt, web, whatever) you can stand up purpose-built servers for those services very cheaply. Divide and conquer; if your mail server gets hacked, it only affects your mail server, not your doc store, web server, asterisk, etc. </div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">3. Strong passwords. like Real Strong. 8 is not enough anymore. upper, lower, special characters, numbers. each single character more than 8 is a magnitude greater to hack.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">4. back to 2; if you aren't using a service (print, etc), turn it off on the system that doesn't need it. it's just shutting down another exploit vector.</div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">5. Think like a criminal who is looking to subvert your connection. And if something doesn't feel right, it isn't, and requires some work on your part. open source scripts and such are a good start, but not the only answer. </div><div id="AppleMailSignature"><br></div><div id="AppleMailSignature">6. Go to your local bookstore and find a good book on network security and read it. Google best practices from known good vendors (IBM, AT&T, NIST, etc). If you are going to play on the network, you darn well better know the minefield you are walking into. <br><br>--<div>Bryan Boyle, CISSP/GIAC/CISM</div><div>WB0YLE</div><div>Sent from my iPhone 6S.<span style="font-size: 13pt;">..No electrons were harmed in the sending of this message.</span></div><div><br><div><br></div></div></div><div><br>On Jul 11, 2016, at 14:02, Loren Tedford <<a href="mailto:lorentedford@gmail.com">lorentedford@gmail.com</a>> wrote:<br><br></div><blockquote type="cite"><div><p dir="ltr">I suppose while we are stepping on toes I want to ask about the proper way of securing a dial box from our wonderful hackers out their.. Been using ufw and fail2ban but found out recently nothing is invincible.. any thoughts?? By the way any progress on asterisk crashes?? I can't find a reason for the crashes in the logs..<br></p>
<p dir="ltr">Also what is the status on updating asterisk to a more current version?? Any issues with that?? <br><br></p>
<p dir="ltr">Loren Tedford (KC9ZHV) <br>
Email: <a href="mailto:lorentedford@gmail.com">lorentedford@gmail.com</a><br>
Phone: <br>
Fax: <br>
<a href="http://www.lorentedford.com">http://www.lorentedford.com</a><br>
<a href="http://kc9zhv.com">http://kc9zhv.com</a></p>
<p dir="ltr">Sent from Droid Turbo from Verizon wireless network</p>
<div class="gmail_quote">On Jul 11, 2016 12:34 PM, "Steve Zingman" <<a href="mailto:szingman@msgstor.com">szingman@msgstor.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
Yes,<br>
I've seen it before. Ramesh asked the question here and a couple of
us had some questions as to his configuration. I think he is in
process of gathering info so we can trouble shoot more.<br>
I't not hard to get lists confused.<br>
<br>
Steve<br>
<br>
<div>On 7/11/2016 1:30 PM, DuaneVT . wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default">Thanks Steve. You have
helped me several times here I believe. Perhaps it was the ARM
Allstar list I should have ranted to. As some posts get shared
between lists, it is hard not to end up on another list. </div>
<div class="gmail_default">Here is an example. I
felt for the questioner...</div>
<div class="gmail_default">"<span style="font-size:15px;font-family:arial,sans-serif">Message:
3</span></div>
<span style="font-size:15px">Date: Sun, 10 Jul 2016 09:53:39
-0400</span><br style="font-size:15px">
<span style="font-size:15px">From: Doug Crompton <</span><a href="mailto:doug@crompton.com" style="font-size:15px" target="_blank"></a><a href="mailto:doug@crompton.com" target="_blank">doug@crompton.com</a><span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">To: ARM Allstar <</span><a href="mailto:arm-allstar@hamvoip.org" style="font-size:15px" target="_blank"></a><a href="mailto:arm-allstar@hamvoip.org" target="_blank">arm-allstar@hamvoip.org</a><span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">Subject: Re: [arm-allstar] Using
"A" and "B" audio outputs using the</span><br style="font-size:15px">
<span style="font-size:15px"> DIAL Image on a RPi</span><br style="font-size:15px">
<span style="font-size:15px">Message-ID: <BLU171-</span><span style="font-size:15px">W25439CF444D3509E8F7BE5BA3E0@</span><span style="font-size:15px">phx.gbl></span><br style="font-size:15px">
<span style="font-size:15px">Content-Type: text/plain;
charset="iso-8859-1"</span><br style="font-size:15px">
<br style="font-size:15px">
<span style="font-size:15px">Ramesh,</span><br style="font-size:15px">
<br style="font-size:15px">
<span style="font-size:15px"> This is NOT a dial list, ask
elsewhere! It works fine on the </span><a href="http://hamvoip.org/" rel="noreferrer" style="font-size:15px" target="_blank">hamvoip.org</a><span style="font-size:15px"> code.</span><br style="font-size:15px">
<span style="font-size:15px">73 Doug</span><br style="font-size:15px">
<span style="font-size:15px">WA3DSP</span><br style="font-size:15px">
<a href="http://www.crompton.com/hamradio" rel="noreferrer" style="font-size:15px" target="_blank">http://www.crompton.com/hamradio</a><br style="font-size:15px">
<br style="font-size:15px">
<br style="font-size:15px">
<span style="font-size:15px">> To: </span><a href="mailto:arm-allstar@hamvoip.org" style="font-size:15px" target="_blank"></a><a href="mailto:arm-allstar@hamvoip.org" target="_blank">arm-allstar@hamvoip.org</a><br style="font-size:15px">
<span style="font-size:15px">> Date: Sun, 10 Jul 2016
07:34:57 -0400</span><br style="font-size:15px">
<span style="font-size:15px">> Subject: [arm-allstar] Using
"A" and "B" audio outputs using the DIAL Image on a RPi</span><br style="font-size:15px">
<span style="font-size:15px">> From: </span><a href="mailto:arm-allstar@hamvoip.org" style="font-size:15px" target="_blank"></a><a href="mailto:arm-allstar@hamvoip.org" target="_blank">arm-allstar@hamvoip.org</a><br style="font-size:15px">
<span style="font-size:15px">> CC: </span><a href="mailto:Ramesh@va3uv.com" style="font-size:15px" target="_blank"></a><a href="mailto:Ramesh@va3uv.com" target="_blank">Ramesh@va3uv.com</a><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> Hi All:</span><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> I am using the DIAL Image on a
PRi 2; I would like to use the "A" and</span><br style="font-size:15px">
<span style="font-size:15px">> "B" audio outputs from my fob
(A for voice and B for PL), so that I can</span><br style="font-size:15px">
<span style="font-size:15px">> inject them into separate
points on my exciter.</span><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> I was able to get 2 'discrete'
audio outputs when running ACID on a PC.</span><br style="font-size:15px">
<span style="font-size:15px">> This doesn't seem to be
working with the Pi / DIAL. Is anyone running</span><br style="font-size:15px">
<span style="font-size:15px">> this configuration on a Pi?</span><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> Thx,</span><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> Ramesh.</span><br style="font-size:15px">
<span style="font-size:15px">></span><br style="font-size:15px">
<span style="font-size:15px">> # 27919 and a truck load of
others!
<div class="gmail_default">"</div>
</span>
<div><span style="font-size:15px">
<div class="gmail_default"><br>
</div>
</span></div>
<div><span style="font-size:15px">
<div class="gmail_default">Sheesh,
I want to help everyone....</div>
</span></div>
<div><span style="font-size:15px">
<div class="gmail_default">Thanks
again until my next question HERE,</div>
</span></div>
<div><span style="font-size:15px">
<div class="gmail_default">Duane
</div>
</span></div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Jul 11, 2016 at 1:06 PM, Steve
Zingman <span dir="ltr"><<a href="mailto:szingman@msgstor.com" target="_blank">szingman@msgstor.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> Duane,<br>
When were you told on the App_rpt-users list to go
elsewhere with DIAL questions? DIAL is the official
distribution for AllStar. Support questions SHOULD be
posted here. I know that other lists limit their support
to THEIR distribution and have curtly told DIAL users to
go elsewhere for support. I do not remember seeing your
question on here. If I missed it, I'm sorry. I TRY to help
out with DIAL and general Asterisk questions when
possible.<br>
<br>
73, Steve N4IRS<br>
INAD <br>
<br>
<div>On 7/11/2016 12:42 PM, DuaneVT . wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small">I too have asked
questions here concerning DIAL and been told curtly
to go elsewhere. As DIAL distros have all the files
included and interface to the FOBs and SBCs, where
do we draw the line? I have followed all
instructions for installing the software and had
fresh boot problems. It was hard to tell where the
problem was, but when I am new to Linux/DIAL and the
whole Allstar project, I looked for guidance where I
found discussions. There is an Allstar Link
community on Google+, and you will see I have all
except 1 postings! Crickets.........</div>
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small">Perhaps the
moderator/users here could post a list of URLs for
different aspects of AllStar Link so us Newbies
would know where to hang out.</div>
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small">I have had GREAT
support from other listers here by direct email
after each post and I sincerely thank all who have
taken an interest in someone who has to learn as we
all do.</div>
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small">73,</div>
<div class="gmail_default" style="font-family:comic sans ms,sans-serif;font-size:small">Duane KA1LM
#42996</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
App_rpt-users mailing list
<a href="mailto:App_rpt-users@ohnosec.org" target="_blank">App_rpt-users@ohnosec.org</a>
<a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users" target="_blank">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a>
To unsubscribe from this list please visit <a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users" target="_blank">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. </pre>
<span><font color="#888888"> </font></span></blockquote>
<span><font color="#888888"> <br>
<pre cols="72">--
"Anything is possible if you don't know what you are talking about."
1st Law of Logic
</pre>
</font></span></div>
</blockquote>
</div>
<br>
</div>
</blockquote>
<br>
<pre cols="72">--
"Anything is possible if you don't know what you are talking about."
1st Law of Logic
</pre>
</div>
<br>_______________________________________________<br>
App_rpt-users mailing list<br>
<a href="mailto:App_rpt-users@ohnosec.org">App_rpt-users@ohnosec.org</a><br>
<a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users" rel="noreferrer" target="_blank">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a><br>
<br>
To unsubscribe from this list please visit <a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users" rel="noreferrer" target="_blank">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"<br>
You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. <br></blockquote></div>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>App_rpt-users mailing list</span><br><span><a href="mailto:App_rpt-users@ohnosec.org">App_rpt-users@ohnosec.org</a></span><br><span><a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a></span><br><span></span><br><span>To unsubscribe from this list please visit <a href="http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users">http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users</a> and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"</span><br><span>You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem. </span></div></blockquote></body></html>