FreePBX on FreePBXHosting.com Best Practices & VPN

[moussa854 (Moussa)]

I have my FreePBX in the cloud. I also manage an OpenVPN server in the cloud. I am using pfsense (on site) to connect to OpenVPN and from there to FreePBX. I only allow the OpenVPN IP address and the SIP providers IPs and port ranges to access the FreePBX on the cloud Firewall. Pfsense (and all the endpoint) can connect directly to the FreePBX using the VPN.

Additionally, I wrote a script to send me an email (within minute) if the system was accessed from any unapproved IP.

[HOW-TO] Monitor and Set Email Alert For Unauthorized Access to FreePBX (Centos) Server

I was able to set my FreePBX in the cloud. I was also able to secure the FreePBX by using firewall, VPN and intrusion detection to limit the allowed IPs that access the FreePBX. While I was browsing this forum I read some FreePBX were hacked. Hope I won’t but I would like to set an email alert for any newly created admin, user and/or extension. I appreciate any help or directions. Best.

I do not use LetsEncrypt, they keep changing their IP addresses. I used Certificate Management to upload third party (cheap) SSL certificate for UCP users to send faxes (we use the FreePBX as fax system as well).

On smartphone, I have OpenVPN app connected to the OpenVPN server (to get an approved IP).