ASTERISKNOW(TM) HARDENING SCRIPT

AsteriskNow hardening/bootstraping script

WARNING : This script don’t work on AsteriskNow 2.X, we intend to release a new compatible version soon.

This script do little, but needed tasks to secure a new AsteriskNOW Installation (1.7). Dont try this script on a existing server, bad things may happen.

Features :

  • Randomize MySQL root password;
  • Randomize MySQL FreePBX password;
  • Randomize FreePBX Manager password;
  • Create a SSH user named “admin”;
  • Change both SSH, ARI and FreePBX to a user specified password;
  • Disable some non essential services;
  • Setup NTP;
  • Disable remote root login;
  • Increase shell security (password lenght, auto bash logout)
  • Fix MySQL CDR issue
  • Install all FreePBX modules

Usage

wget http://medsecure.ca/download/AsteriskNow-1.7-harden-v10.sh.txt
sh AsteriskNow-1.7-harden-v10.sh.txt

Screenshot

...
MySQL root password         : 8KwPSPuVHbhd  (auto-generated)
MySQL asteriskuser password : IziCtoAxbvyu  (auto-generated)
Asterisk Manager password   : B5lvuP4qw9JT  (auto-generated)
Admin password (ssh/ari/gui):  (user specified)
Press any key to continue... (or Ctrl+C to stop now)
...

Download

WARNING : This script don’t work on AsteriskNow 2.X, we intend to release a new compatible version soon.

Hardening script for AsteriskNow 1.7 : AsteriskNow-1.7-harden.sh (2043)

Support

This script is offert as-is as part of our commitment to the open source telephony community. Question or feature request, send at @FrancoisHarvey on twitter or use http://medsecure.ca/contact for business assistance.