This is an optional service called event_guard and it was designed to protect your VoIP server. It watches registration events and blocks those that abuse it. It doesn’t watch server logs. It currently supports iptables and pf firewalls. Netfilter firwall support will be added in the future.
Event guard logs blocked and unblocked calls to Status -> Event Guard. Event guard uses the Advanced -> Access Control allowed nodes as a white list. Can add a new Access Control List called Customers or any name you like set to default deny then add the customer CIDR to a new node set as allowed.
Event Guard also looks at the current allowed IP addresses and trusts these registered IP addresses that were authenticated.
- Make sure to upgrade to the latest FusionPBX version
- Update the database structure
- Advanced -> Upgrade -> Schema
- Update App Defaults
- Advanced -> Upgrade -> App Defaults
- Run the following commands to install as a service
cp /var/www/fusionpbx/app/event_guard/resources/service/debian.service /etc/systemd/system/event_guard.service systemctl enable event_guard systemctl start event_guard systemctl daemon-reload
- or as a cron job
php /var/www/fusionpbx/app/event_guard/resources/service/event_guard.php >/dev/null 2>&1 &
Unblock an IP Address¶
To unblock an address select the check box and then press the UNBLOCK button on the top right.