Book Image

TrixBox Made Easy

By : Kerry Garrison, Barrie Dempster, Kerry Garrison (Project)
Book Image

TrixBox Made Easy

By: Kerry Garrison, Barrie Dempster, Kerry Garrison (Project)

Overview of this book

TrixBox is a telephone system based on the popular open source Asterisk PBX (Private Branch eXchange) Software. TrixBox allows an individual or organization to setup a telephone system with traditional telephone networks as well as Internet based telephony or VoIP (Voice over Internet Protocol). SugarCRM can be integrated with Asterisk, and is bundled with Trixbox offering real power and flexibility. The book begins by introducing telephony concepts before detailing how to plan a telephone system and moving on to the installation, configuration, and management of a feature packed PBX. This book is rich with practical examples and tools. It provides examples of well laid out telephone systems with accompanying spreadsheets to aid the reader in building stable telephony infrastructure.
Table of Contents (16 chapters)
TrixBox Made Easy
About the Authors
About the Reviewers
Free Chapter
Introduction to VoIP
TrixBox Configuration
Commonly Used VoIP Terms

Chapter 10. Securing our TrixBox Server

You may be wondering why you need to secure a phone system. If we had built a Linux system from the ground up, we may have selected our own passwords for each component that we install. With TrixBox, every installation has the same logins and passwords and the Linux installation is not locked down from outside connections. It doesn't take much effort to do a network scan for unsecured TrixBox servers and log in using the default settings. Most installations will be installed behind firewalls; but this doesn't mean we shouldn't take basic precautions with our server. The diagram below shows a typical network layout:

Changing Default Passwords

The main login and password for our system is the root account. If someone gains access to the root account, they have full and complete access to our entire system. This is the first thing we should change before deploying our system. Either logged in from the console or via SSH, we need to use the passwd command...