A checklist for hardening an Asterisk PBX: PJSIP ACLs, fail2ban, TLS/SRTP, endpoint authentication, dialplan injection risks, inbound context separati...
PCI DSS v4.0.1 guidance for Asterisk phone payments, including MixMonitor muting, DTMF suppression, logging risks, scope, and SAQ considerations.
Secure Asterisk DISA example with PIN checking, source restrictions, caller ID controls, toll-fraud warnings, and safer alternatives.
STIR/SHAKEN framework for cryptographically signing and verifying caller ID information on SIP calls to combat robocalls and spoofing. Covers FCC mand...
Configure PJSIP authentication in Asterisk. Covers basic auth setup for phones and SIP trunks, how SIP digest authentication works, pre-hashed passwor...
Generate a quick-glance fail2ban report from the command line. The script queries every active jail, prints a summary table of current and total bans,...
Replace Asterisk's self-signed PJSIP TLS certificate with a trusted Let's Encrypt cert, using a certbot deploy hook to keep it renewed automatically.
Configure fail2ban for Asterisk on Debian 12+ systems using journald without rsyslog. Covers the backend switch from file monitoring to systemd journa...
Send incoming call notifications to a Slack channel via webhook, with FILTER() to prevent shell injection from caller ID data.
Generate a private CA and self-signed TLS certificates for PJSIP and WebRTC using Asterisk's built-in ast_tls_cert script, including client certificat...
Restrict SIP registration and call traffic to trusted IP ranges using PJSIP ACLs, blocking scanners and brute-force attacks before authentication is a...
Configure fail2ban jails and filters to block SIP brute-force and scanning attacks on Asterisk. Includes custom regex filters for PJSIP auth failures ...