Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread Kristian Kielhofner

Samy Antoun wrote:

Sorry I'm late.  How about a shameless plug for my
distro - AstLinux. 



Kris,

I was taking a look at your site yesterday, great
work. One day I'll get a Soekris and try it out. I'm
downloading the PC distro now to give it a try.

Appreciate your work

Samy

ps. Why you are not listed in distrowatch.com


Sammy,

	Thanks for the tip!  I just sent them an e-mail, but their site does 
say that embedded distros are not accepted into the general list.  I 
think it's debatable whether or not AstLinux is embedded.


	I think the one problem that I have is the impression that AstLinux is 
only for Soekris hardware - not the case!  I get more than twice as many 
downloads for the generic i586 image!


--
Kristian Kielhofner
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread Tzafrir Cohen
On Wed, Jun 01, 2005 at 08:27:31PM -0700, Samy Antoun wrote:
 Hi,
 
 I'm planning to get my Asterisk box out of the LAN,
 get rid of my router and make the box acts as a
 Router, Firewall, DHCP Server (with Shorewall).

Regarding the DHCP part:

On Rapid we added dnsmasq as an the dns/dhcp server (not installed by
default). This is also what we use in our office. It is very simple to
use. If you enble in /etc/dnsmasq.conf read-ethers then making a
reservation is as simple as adding an entry to /etc/ethers (and you can
use host names from /etc/hosts in /etc/ethers, keeping the IPs to
/etc/hosts alone). 

So I hearlt recommend dnsmasq (version 2).
Don't waste time on trying to set up bind and ISC-dhcpd :-)

-- 
Tzafrir Cohen | [EMAIL PROTECTED] | VIM is
http://tzafrir.org.il |   | a Mutt's  
[EMAIL PROTECTED] |   |  best
ICQ# 16849755 |   | friend
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread C. Hatton Humphrey
 I'm planning to get my Asterisk box out of the LAN,
 get rid of my router and make the box acts as a
 Router, Firewall, DHCP Server (with Shorewall).
 
 I'll do that to be able to use some SIP clients
 remotely.
 
 Does anyone doing the same with the Asterisk box, is
 it a good idea, is there any other solution for the
 SIP emote Clients.

I'm new here but have to go ahead and throw in a reply - I'm doing
something very similar to this but in a different way... I have a
FreeBSD box that is already set up to be my router/firewall/IDS/MySQL
server.  I'm working on getting it set up with Asterisk... just got it
working with FWD and a Packet8 DTA based phone.

I have to admit, there's a lot of stuff to wrap your head around with
this stuff!

Hatton
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread Mike Dent
 Samy,
 
 Sorry I'm late.  How about a shameless plug for my distro - AstLinux.
 It sounds like it may work well for your needs:
 
 http://www.kriscompanies.com/modules.php?name=Contentpa=showpagepid=3
 
 --
 Kristian Kielhofner

Hi,
I like the look of this, however I'm not ready to go the full soekris
route just yet.

Is it possible to run this on a i586 but without CF, eg using the hard
disk for booting
etc?
Can I get rid of the CD once its booted?

(I tried using a USB pen drive and genkd but got an error when I ran it.)


Thanks
Mike
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread Ing CIP Alejandro Celi =?ISO-8859-1?Q?Mari=E1tegui?=
El mié, 01-06-2005 a las 22:27, Samy Antoun escribió:

 I'm planning to get my Asterisk box out of the LAN,
 get rid of my router and make the box acts as a
 Router, Firewall, DHCP Server (with Shorewall).
 
 I'll do that to be able to use some SIP clients
 remotely.
 
 Does anyone doing the same with the Asterisk box, is
 it a good idea, is there any other solution for the
 SIP emote Clients.
 
 Regards.

Works fine for me, but I have my Asterisk behind another Linux iptables
firewall cause the DoS and the mass attacks (perhaps you will use MySQL
too), a lot of danger for you.

I don't use DHCP for external clients, but we authenticate MAC address
by iptables.

Regards,

-- 
Ing CIP Alejandro Celi Mariátegui 
[EMAIL PROTECTED]

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-02 Thread Ed Greenberg





El mié, 01-06-2005 a las 22:27, Samy Antoun escribió:


I'm planning to get my Asterisk box out of the LAN,
get rid of my router and make the box acts as a
Router, Firewall, DHCP Server (with Shorewall).

I'll do that to be able to use some SIP clients
remotely.

Does anyone doing the same with the Asterisk box, is
it a good idea, is there any other solution for the
SIP emote Clients.

Regards.




I do exactly this. It works fine. My firewall (on the box) blocks all the 
ports I don't want to show publicly.


/edg


___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread steve szmidt
On Wednesday 01 June 2005 23:27, Samy Antoun wrote:
 Hi,

 I'm planning to get my Asterisk box out of the LAN,
 get rid of my router and make the box acts as a
 Router, Firewall, DHCP Server (with Shorewall).

 I'll do that to be able to use some SIP clients
 remotely.

 Does anyone doing the same with the Asterisk box, is
 it a good idea, is there any other solution for the
 SIP emote Clients.

 Regards.

It really depends on what kind of load that cpu is going to have. There's no 
technical problems with doing the above. Except I don't see the point with 
having a dhcp server, unless you are an ISP.

My anti dhcp speech: DHCP makes it hard to see who's connection/packets you 
are looking at when you are checking out what is going on on the LAN. You 
won't be able to learn the typical activities that people do, and so be able 
to recognise odd behavor. Every time you see an IP you have to figure out who 
it belongs to. The work to add a specific IP is so short anyway. 

Router and Firewall services are not very consuming, nor is a DHCP server. But 
the idea is that if you start having quality problems or you are going to 
push the box, you'd be smart to have absolutely nothing running but what you 
actually need.

A well configured Linux box is usually better than an off the shelve dedicated 
appliance. They have too many money vs technical issues and technology 
suffers. That's pretty much true with all of them. 

-- 

Steve Szmidt

They that would give up essential liberty for temporary safety 
deserve neither liberty nor safety.
Benjamin Franklin
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread Rod Bacon
On my * box at home (a dual PIII 1.2Ghz with 512Mb RAM), I'm running * 
(2 single-port FXO cards and SIP/IAX upstreams), MythTV (home theatre 
SW), file  print services and other ancillary services. I have enough 
CPU grunt to decode video (watch DivX) and talk on the phone (inc 
transcoding).


* on it's own is reasonably light on resources.

Go for it!

==
Rod Bacon - VOIP Systems Engineer
Empowered Communications
Ground Floor, 102 York St. South Melbourne
Victoria, Australia. 3205
Phone: +613 99401600Fax: +613 99401650
==


Samy Antoun wrote:

Hi,

I'm planning to get my Asterisk box out of the LAN,
get rid of my router and make the box acts as a
Router, Firewall, DHCP Server (with Shorewall).

I'll do that to be able to use some SIP clients
remotely.

Does anyone doing the same with the Asterisk box, is
it a good idea, is there any other solution for the
SIP emote Clients.

Regards.




__ 
Discover Yahoo! 
Stay in touch with email, IM, photo sharing and more. Check it out! 
http://discover.yahoo.com/stayintouch.html

___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users



___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread Samy Antoun
 It really depends on what kind of load that cpu is
 going to have. There's no 
 technical problems with doing the above. Except I
 don't see the point with 
 having a dhcp server, unless you are an ISP.

Steve,

Thank you for the valuable advice, I'll do exactly
what you are suggesting, No DHCP

Regards.

Samy

__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread Samy Antoun
 Go for it!

I will Rod, wish me luck.

Thanks



__ 
Discover Yahoo! 
Get on-the-go sports scores, stock quotes, news and more. Check it out! 
http://discover.yahoo.com/mobile.html
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread Kristian Kielhofner

Samy Antoun wrote:

Go for it!



I will Rod, wish me luck.

Thanks


Samy,

	Sorry I'm late.  How about a shameless plug for my distro - AstLinux. 
It sounds like it may work well for your needs:


http://www.kriscompanies.com/modules.php?name=Contentpa=showpagepid=3

--
Kristian Kielhofner
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Asterisk Box as a Router, Firewall and DHCP Server

2005-06-01 Thread Samy Antoun
   Sorry I'm late.  How about a shameless plug for my
 distro - AstLinux. 

Kris,

I was taking a look at your site yesterday, great
work. One day I'll get a Soekris and try it out. I'm
downloading the PC distro now to give it a try.

Appreciate your work

Samy

ps. Why you are not listed in distrowatch.com




__ 
Discover Yahoo! 
Get on-the-go sports scores, stock quotes, news and more. Check it out! 
http://discover.yahoo.com/mobile.html
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users