Need: Access to voice mail via web from both inside my organization (church) and from home (external.) Research points me to putting freePBX inside a DMZ. Additionally, I’m thinking I’d like to run egroupware on the same box (it’s a 1.2GHz machine). About 20 phones max, sporadic use on most, transferring to 2 copper PSTN lines via Digium FXO cards (using freepbx strictly as a PBX). Of the 20, only 4 are in “constant” use on the outside lines.
my questions:
Is the above configuration advised? Misguided?
I currently have egroupware running under lampp; I’d like to install freePBX under lampp as well. Again, advised or misguided?
This would give me only a single system in my DMZ, with access to what I need, without running duplicate web servers & mysql.
You are absolutely right :oops: A DMZ is not the appropriate place; port forwarding with a special port ought to work much better. I was even toying with the idea of a VPN, but this sounds far easier.
External Web access: port forwarding worked perfectly! This does exactly what I need, which eliminates that issue completely.
Still curious about running under LAMPP; i see Trixbox runs this under lampp, but is it up to date with freePBX releases? (probably off-topic now) I’m looking at the web sites, but haven’t had much time to dig into that issue.
What research is that, and which box of Cracker Jack did you find it in?
No way would I ever put Asterisk inside a DMZ. You could possibly open port 80 (http) to your Asterisk box so that users could access the web browser, but I don’t advise that either for several reasons, not the least of which is that they have access to all your FreePBX configuration pages (of course those are password rotected, but still it would make me a bit nervous).
I’m not a Linux geek but it would seem to me that possibly the most secure thing you could do is run another instance of Apache on a different port (say 8080) and ONLY let it access the voicemail page. Then port-forward that port (instead of port 80) to your Asterisk box. I don’t know how to start another instance of Apache and lock it down so it’s really secure, but that would certainly be a good subject for a tutorial or a Nerd Vittles article, or for an inclusion in Trixbox. There ought to be some way that remote users can get their voicemail through the web without throwing your system wide open to attackers.
Using a non-standard port has two benefits: It makes it a little less obvious that there’s a web server there, and it gets past some ISP port blocks on port 80 (in case your ToS prevents you from offering web pages to the casual web surfer). The only disadvantage is that your users have to add the port number to the URL, e.g. http://your.web.address:8080 or whatever.
I use Trixbox the way you planning on using without any problems.
The trick is to have your traffic prioritized correctly as you do not want
the quality of voice be affected by the downloads.
Once you take care of that you set.
[quote] -----Original Message-----
From: [email protected]
[mailto:[email protected]] On
Behalf Of jostrosky
Sent: Wednesday, December 13, 2006 11:15 AM
To: [email protected]
Subject: Re: [Amportal-users] How about freepbx under LAMPP?
Yes, I understand what freePBX is; i have it in use, and I’ve
used asterisk for some time. What I’m wondering is,
with my expected load, can I use that box for other
low-load items? (i have limited space for servers) Let’s
face it, I’ve seen estimates of what Asterisk takes per call,
and I don’t believe my usage is anywhere near capacity with a
1.2Ghz box.
I would like the voicemail part to be accessible via web,
because delivery via email is fine, but not everyone wants
voicemail that way.
But, your points are well taken, and I will consider. Thanks.
Yes, I understand what freePBX is; i have it in use, and I’ve used asterisk for some time. What I’m wondering is,
with my expected load, can I use that box for other low-load items? (i have limited space for servers) Let’s face it, I’ve seen estimates of what Asterisk takes per call, and I don’t believe my usage is anywhere near capacity with a 1.2Ghz box.
I would like the voicemail part to be accessible via web, because delivery via email is fine, but not everyone wants voicemail that way.
But, your points are well taken, and I will consider. Thanks.
U do understand that Freepbx is GUI for asterisk right??? Freepbx gives you nothing without asterisk and asterisk (PBX) should be installed on a box by itself without any other use.
DMZ is NO NO for any box
You only forward the needed ports for the system to function
Voice mail is sent to email and can be accessed via a remote extwn so no need to exposing the box
On Wednesday 13 December 2006 15:02, jostrosky wrote:
[quote] Need: Access to voice mail via web from both inside my organization
(church) and from home (external.) Research points me to putting freePBX
inside a DMZ. Additionally, I’m thinking I’d like to run egroupware on the
same box (it’s a 1.2GHz machine). About 20 phones max, sporadic use on
most, transferring to 2 copper PSTN lines via Digium FXO cards (using
freepbx strictly as a PBX). Of the 20, only 4 are in “constant” use on the
outside lines.
my questions:
Is the above configuration advised? Misguided?
I currently have egroupware running under lampp; I’d like to install
freePBX under lampp as well. Again, advised or misguided?
This would give me only a single system in my DMZ, with access to what I
need, without running duplicate web servers & mysql.
