@johnyog said in AmpLifi:

@fuznutz04 It is a nerd thing. I have been putting in Unifi systems at my friends businesses. I would like a more extensive firewall device. The edge router platform is nice but not as nice as a sophos utm. I would like to get a hold of a AmpLifi system to give it a swing and see what kind of features it has.

I haven't played with the Sophos UTMs at all, but for the price of the ERX ($100), you can't go wrong. Some places (specifically my house) wouldn't need all the extra tools available in a UTM device. They definitely have their place though in some businesses.

Dealing with a Polycom conference phone that has been getting Ghost calls. Probably a script kiddie of sorts. Time to review their config file and lock it down a bit more.

@travisdh1 I knew it!

Well, this is driving me insane. I have a FreePBX box with a self signed cert. I was able to access the box fine from my Macbook with both Safari and Chrome. With Chrome, I just your standard "your connection is not private, and then the option to proceed anyway. However, a co-worker of mine needed to connect via his Windows 10 box, and he cant. from my Windows VM, neither can I. Chrome gives a "NET::ERR_CERT_INVALID" error and "You cannot visit pbx.domain.com right now because the website sent scrambled credentials that Google Chrome cannot process." with no option to proceed. That's issue number 1 that I'd like to get working.

As an alternative, FreePBX now has Let's Encrypt functionality build right into the cert manager. So, I gave that a shot. For the host name, I put in the proper DNS name of my PBX box (pbx.domain.com) An A record was already created at my registrar for this DNS name/IP. I get the error "There was an error updating the certificate: Token did not match"

Any suggestions for either problem?

Thanks!

Finally, back in second by a hair.

I have friends near Dallas. I could save some $ on hotel if they are close enough. I assume venue and address will be announced later this week as well?

Bingo. Just as I was reading your reply, I remembered that I had previously setup a .htaccess redirect to auto redirect 80 to 443 just to ensure that nobody tries to manage the box thorugh port 80. I disabled that temporarily and it worked right away. The cert is only valid for 3 months. Do you know if this will auto renew via the cert manager in FreePBX, or is it a manual process?

Thanks!

Just convinced my wife to start Spanish on Duolingo! Hopefully that accelerates my learning if we both learn together.

At bwi airport In Baltimore

@JaredBusch said in FreePBX, SelfSigned Certs, & Let's Encrypt:

@fuznutz04 said in FreePBX, SelfSigned Certs, & Let's Encrypt:

@travisdh1 said in FreePBX, SelfSigned Certs, & Let's Encrypt:

@fuznutz04 said in FreePBX, SelfSigned Certs, & Let's Encrypt:

Bingo. Just as I was reading your reply, I remembered that I had previously setup a .htaccess redirect to auto redirect 80 to 443 just to ensure that nobody tries to manage the box thorugh port 80. I disabled that temporarily and it worked right away. The cert is only valid for 3 months. Do you know if this will auto renew via the cert manager in FreePBX, or is it a manual process?

Thanks!

You can automate it, but you need to do some work to make it happen. Looks like the new certbot-auto makes it way easier. In your case I'd do a small script to open port 80, do the renewal, and reapply the security settings. The renewal is REALLY easy now, this is the crontab entry I'm using for it.

@weekly /path/certbot-auto renew -q

Nice. I'll give that a shot. I also temporarily added the outbound1.letsencrypt.org, outbound2.letsencrypt.org, mirror1.freepbx.org, mirror2.freepbx.org domains to the trusted zone in the responsive firewall. Then removed them afterwards since these are needed to get the cert. I guess I could also just write some firewall rules instead. Is anyone else doing this?

Why do you want your PBX open to the public internet? Do your users actually use the UCP?

No, they don't. We need to have it open as it is hosted elsewhere.

@scottalanmiller said in DuoLingo Challenge:

@fuznutz04 said in DuoLingo Challenge:

I lost my almost 25 day streak yesterday! Need to play catchup.

I'm on 33 days here!

Had good intensions, but then had a few beer and completely forgot to do it.

Awesome! Can't wait to get this installed.

Is anyone having issues with call quality with Vitelity? Every so often, like last evening and right now, we have some jitter on our calls. PBX is hosted, but specs look fine with plenty of room to spare. Response time (via ping only) from PBX server to Vitelity trunk IP is also well within what I consider to be acceptable range. (below 40ms)

Writing a new script to automate setup of FreePBX.

Started using brackets http://brackets.io as a text editor. Really nice for writing scripts. Color coding, auto completion / closure and best of all, it has a "dark" theme.

Just wait until the Tesla self driving cars are hacked. Can you even imagine....

@LAH3385 said in Voice/Greeting recording for generic holidays and other messages...Where do you get them from?:

@fuznutz04
I want him!!!! I neeeeeeed John Bailey!!!! I say he's probably my second best voice next to Morgan Freeman.

Yeah, either of those two guys would work. Really, I would settle for either of them on my personal voicemail greeting.

@scottalanmiller said in What Are You Doing Right Now:

@fuznutz04 said in What Are You Doing Right Now:

@JaredBusch said in What Are You Doing Right Now:

@fuznutz04 said in What Are You Doing Right Now:

Writing a new script to automate setup of FreePBX.

Started using brackets http://brackets.io as a text editor. Really nice for writing scripts. Color coding, auto completion / closure and best of all, it has a "dark" theme.

What are you automating? There is next to nothing to do if you install from the ISO.

Are you trying to setup from a standalone system? For what purpose do you need to do it so often that you need to script it?

Basically just user setup, ssh port change, adding people to groups, and uninstalling unnecessary modules, etc. Nothing fancy, just felt like scripting tonight.

I like to have glances and a few tools that are no big deal, but annoying if I forget them. So I add those in.

Glances... I have to check that out. I've been looking for a better way to monitor remote servers.

@Dashrender said in San Francisco transit hacked:

@fuznutz04 said in San Francisco transit hacked:

Just wait until the Tesla self driving cars are hacked. Can you even imagine....

Telsa hasn't been, but several other car manufacturers already have been - and been shown to be able to take over gas and break pedals.

I really wonder if Telsa is acting more like a tech company, and less like an auto maker, and paying more attention to security, etc?

I would sure hope so. Such a huge amount of risk/liability to take on as a company once you get into something like this.

Linux Gurus:

Upon restarting my PBX (FreePBX) or restarting Asterisk, permissions are reset on any directories/files needed by Asterisk. In FreePBX 13, the “fwconsole chown” command accomplishes the same thing.

I need to have one user “fred” have write permission to the /var/www/html/test directory to occasionally update files within that folder. I can change the folder owner via SSH with a command, but the owner always gets reset when Asterisk restarts, and therefore user “fred” no longer can write to that directory. Fred is a member of the wheel group, who is also allowed to Sudo.

Fred is using WinSCP to try and transfer the files, and does not want to have to SSH into the server to change his permissions before he uploads the file.

What is the best practice for allowing fred permanent write access to that one directory, considering that the permissions are always reset upon restart?

Getting ready to host another Party!