Issue with latest version of FreePBX (Reports ==> Asterisk Info) - Channels

[ahmedsallam]

Good Morning Colleagues
I hope you are doing good and safe . I have recently installed the latest version of FreePBX (SNG7-PBX16-64bit-2302-1) .

After logging to GUI , I go to Reports ==> Asterisk Info . Usually in the previous versions of FreePBX , under channels, You can find information related to the configured extensions / Trunks found in this section .

In this new version , Nothing found . What i find is the attached under channels section.

How can i restore the information that usually found in the previous version of FreePBX related to the configured extensions / Trunks found in this section?

Best Regards

[PitzKey (Itzik)]

Settings → Advanced Settings → Enable the Asterisk REST Interface → Yes

[ahmedsallam]

@PitzKey

Enable the Asterisk REST Interface

Good Afternoon PitzKey
I have followed the steps then reboot FreePBX but i found the below message under Channels section so kindly advice.

Best Regards

[lhwhistler]

I believe this is due to an update related to the security vulnerability in this post:

Inactive Stasis app 'hey' missed message

I’m seeing this on two of my servers after the latest updates to core and framework. Oddly though I don’t see this on other servers. The two in question are both running Zulu, Sangoma connect and phone apps. These are also the only ones running VPN for remote phones. I do have a couple others running the same without the VPN component and they do not have this message spamming the console 3 or so times a second. Does anyone know what this app hey is?

I had to go into Settings → Advanced Settings and reset my ARI credentials using the buttons in the screenshot below.

This ended up removing the error message you’re seeing.

[ahmedsallam]

Hi lhwhistler
Thx for your post . I can’t find ARI Username & ARI Password buttons in Advanced settings but i follow the below post to reset ARI username & password and it is worked now !

Recent reports of ARI exploit on FreePBX systems

For more than a month we’ve seen a small number of reports of exploited PBX systems used for traffic pumping. Initially details were scant, but a few commonalities emerged: Asterisk http/https service port(s) exposed to untrusted traffic There was a spurious ARI app running in Asterisk Background: To create an ARI app you need access to the Asterisk http/https service and you need ARI user credentials. The FreePBX ARI user is called freepbxuser and the password is generated at time of install…

Thx colleagues for your help

Best Regards