Any way to view security logs or failed SIP registrations in FreePBX?

General Help
1

Is there some place I can go to view logs of any type of failed connection attempt, whether it’s to my admin page, via SSH, or even failed SIP registrations? I would just like to have a place to keep an eye on any possible security concerns.

I know I have the call log to obviously track the usage, but other than that is there anything else I can be monitoring?

I’m using FreePBX 2.9.0.7.

Thanks!

2

You can look at the Asterisk log files in /var/log/asterisk.

Also take a look at the System Admin module. You can set email destinations for various things FreePBX monitors like Storage Notifications and Intrusion Detection Notifications.

3

Thanks!

Where can I find the System Admin module? Is it a third-party module that I need to download and install? That sounds really, really handy.

4

It should be at the bottom of the tools tab.

5

I do see the “System Administration” section under the Tools tab. Listed under there are:

Asterisk API
Asterisk CLI
Asterisk Info
Asterisk Phonebook
Backup & Restore
DUNDi Lookup
Java SSH
PHP Info
PHPAGI Config
Print Extensions
Route Congestion Messages
Weak Password Detection

Maybe I’m overlooking something simple, but I’m not seeing anything that allows me to set notifications. Under PHPAGI, there is an option to email errors, but this doesn’t look like the same thing.

6

You only get the intrusion detection when you install the distro. It installs the fail2ban package.