The MySQL database engine powers FreePBX. However, default settings on many distributions can easily make it one of the most vulnerable points on a server. Note that after the following suggestions are implemented, it is a good idea to restart the MySQL server (or just simply reboot the entire server) to force new settings to take effect.
The one biggest flaw that is often overlooked once a system is running is the passwords on the system's MySQL accounts.
If no passwords have been set on the accounts that were used to set up FreePBX, use the following code to set new passwords. The following examples assume that the FreePBX MySQL user is named "asterisk". If this is not the case with your PBX, you will need to adjust the sample command accordingly.
In order to set the root MySQL account password, use the following code:
mysqladmin -u root password NEWROOTPASSWORD
(Replace NEWROOTPASSWORD
with the desired MySQL root password).
In order to set the asterisk MySQL...