Steve any idea how far we have gotten?? The security threat list is pretty large at the moment..
https://www.cvedetails.com/vulnerability-list/vendor_id-6284/Asterisk.html

And honestly the above is probably for more current versions which mean their are probably more threats out their than we really want to think about..

All i know is we can't keep running on this version for ever well i don't think we can.. I guess we may get to the point of apt pinning.. 

While i am being honest here.. We should probably one day update the mailing list to more of a forum thread some where with actual details etc.. Mailing list seems to be abit old school just my thoughts..


On Mon, Jul 11, 2016 at 1:12 PM, Steve Zingman <szingman@msgstor.com> wrote:
Time, Energy, drive, people. Just to name a few.


On 7/11/2016 2:08 PM, Loren Tedford wrote:
Ok so what are missing to get the development started on a more current version of asterisk?? Lets face it 1.4.23 went out of professional service back in like 2010...

Just saying we really need to start thinking more about the future now rather than waiting till we have mass issues across the board.. 


On Mon, Jul 11, 2016 at 1:05 PM, Steve Zingman <szingman@msgstor.com> wrote:
It's going to taker a LOT of work to change versions of Asterisk. That's not to say it will not happen.
I can't re-create you crashes.
I firewall my boxes to only allow access from trusted addresses for ssh. I use a VPN for roaming users. I don't support SIP.


On 7/11/2016 2:02 PM, Loren Tedford wrote:

I suppose while we are stepping on toes I want to ask about the proper way of securing a dial box from our wonderful hackers out their.. Been using ufw and fail2ban but found out recently nothing is invincible.. any thoughts?? By the way any progress on asterisk crashes?? I can't find a reason for the crashes in the logs..

Also what is the status on updating asterisk to a more current version?? Any issues with that??

Loren Tedford (KC9ZHV) 
Email: lorentedford@gmail.com
Phone: 
Fax:
http://www.lorentedford.com
http://kc9zhv.com

Sent from Droid Turbo from Verizon wireless network

On Jul 11, 2016 12:34 PM, "Steve Zingman" <szingman@msgstor.com> wrote: