回復 277# Qnewbie
This might be helpful to you.
http://www.switchfin.org/index.p ... &Itemid=54#p720
Some general rules:
1. change the GUI port to some other ports if you want to administer via internet. However, your router should support port redirection
2. strong user name and password for GUI, I believe you know you can take off admin as user name for the GUI
3. for user extension, only you can make is a strong password.
4. if you are ok, change the default incoming port of SIP to some other port number
For iptables/router firewall, you can add a few more
such as we are dropping the connection for a range of IP as we discuss in other threads
add rule to allow only trusted connection.
For iptables in IP01, I think you may need to back up the rules so that it can review and reload upon rebooting. However, I believe rebooting should be a minimal now when you are at switchfin firmware. My previous experience is more than 3X days. |