AsteriskNow hardening/bootstraping script

This script do little, but needed tasks to secure a new AsteriskNOW Installation (1.7). Dont try this script on a existing server, bad things may happen.

Features :

• Randomize MySQL root password;
• Randomize MySQL FreePBX password;
• Randomize FreePBX Manager password;
• Create a SSH user named “admin”;
• Change both SSH, ARI and FreePBX to a user specified password;
• Disable some non essential services;
• Setup NTP;
• Disable remote root login;
• Increase shell security (password lenght, auto bash logout)
• Fix MySQL CDR issue
• Install all FreePBX modules

Usage

wget http://medsecure.ca/download/AsteriskNow-1.7-harden-v10.sh.txt
sh AsteriskNow-1.7-harden-v10.sh.txt

Screenshot

...
MySQL root password         : 8KwPSPuVHbhd  (auto-generated)
MySQL asteriskuser password : IziCtoAxbvyu  (auto-generated)
Asterisk Manager password   : B5lvuP4qw9JT  (auto-generated)
Admin password (ssh/ari/gui):  (user specified)
Press any key to continue... (or Ctrl+C to stop now)
...

Download

Hardening script for AsteriskNow 1.7 : AsteriskNow-1.7-harden.sh (1229)

Support

This script is offert as-is as part of our commitment to the open source telephony community. Question or feature request, send at @FrancoisHarvey on twitter or use http://medsecure.ca/contact for business assistance.