I’m preparing myself to move from 10.04 to 12.04. With 12.04 as the next Long Term Release (LTS) coming in the next release I thought it was time to prepare for the inevitable move from old to new.

Setup

LTS from Canonical has support for 3 years for the desktop but it has been increased to 5 years for 12.04 code named Precise Pangolin. My Linux headed server currently does a lot and I like to treat it as a production system which cannot go down for long periods of time. The following services are being used:

• FreePBX – PBX system which manages the phones in the house
• Energy@Home – Logs power usage at home
• uPNP – Allows streaming of media to the T.v / Playstation 3
• Ampache – Music streaming service
• MythTv – DVR for digital and analogue T.V

Most noticeably the most important one is FreePBX. The rest are good to have but will only cause inconvenience if it was not running. To complicate things slightly the system is currently using LVM. I have never migrated an LVM before.

Hardware

The computer was originally built in 2004 with some minor upgrades including CPU, RAM and HDD but it’s starting to show it’s age. The hardware was bought as a budget secondary desktop computer but has since resided to a headless 24×7 server. Now it has so many services and software running that the load average is constantly above 5 on a AMD Athlon 64 4000+ (1×2.4GHz stock) with 2GB RAM. The system has a 500 watt PSU but consumes around 130 W.

I think it’s time it received some TLC and a well deserved upgrade and it would be perfect if I could time it with the next LTS. Some of the features I’ll be looking for are:

• Gigabit Ethernet (hopefully 2 if possible)
• More than 4 SATA ports
• At least dual core CPU
• Water cooled CPU

Check List

List of things to do before upgrading:

1. Backup user files – Music, pictures, etc
2. Backup settings – FreePBX, Gnome(possibly), fstab, apache conf, …
3. Backup website files
4. Backup Database

Test Backup

It’s always important to test the backup to ensure they actually work! Files and databases are easy. They can be restored into a different database and files can be copied to a different computer or different location as long there is enough space.

Summary

I probably won’t migrate on the day of release but I may test the backup plan around that time to make sure everything works. Once that’s done, Setup a VM and try installing and restore some of the backed up data and see if it works.

Ubuntu 12.04 LTS to get extra-long desktop support cycle

Related posts:

1. Downtime
2. Replace /dev/xxx With UUID
3. FreePBX Symlink From Modules Failed

10 things to do after installing Ubuntu 11.10

Related posts:

1. Installing Ubuntu 8.10 From USB Stick
2. VirtualBox With Ubuntu Quick Review
3. Ubuntu 8.04 Upgrade To Ubuntu 8.10 No Sound

I was looking for a replacement to Dropbox after the EULA / T&C changes and found SpiderOak to be a very attractive alternative. It’s a backup and folder sharing / sync software which runs on all 3 major platforms (Windows, Mac and Linux). In this article I will compare the differences between Dropbox and SpiderOak.

Signup

Registering for an account was fairly simply. Not much different to other sites around today. Entering the usual details of username, password and email address with a confirmation email after. The service provides 2GB for free which is the same as Dropbox but there is no possibility of extending this without paying. Dropbox has a referral feature which adds 250mb to your account. I have accumulated a few referrals in my time so I have more than the 2GB space but I use less than this currently (but close to the limit).

Dropbox only required a login for each client to access the same account but SpiderOak required more.

Desktop Software

The user interface is not as user friendly as Dropbox but it is also a lot more powerful. Consider SpiderOak a power user tool. It splits items up by category of what you want it to do. There are:

• Status – What SpiderOak is currently doing on the machine
• Backup – Used to manage backup of local directories
• View – Look at items in the “cloud” (backups). The browser also includes revision of each file if multiple backups exist
• Sync – Allow backups to be synchronized across multiple devices
• Share – Allow other people access to files or upload to your SpiderOak

Starting with the Status tab, there are multiple tabs within this page. The first one is overview. This is a good indicator as to what is happening with the 3 main features of Spideroak: Backup, Sync and Share. There are small details within each status such as how many files are currently being upload and the remaining amount in backup, Number of “Syncers” in Sync and the number of sharers in Share. Moving to the Queue sub tab within the Status page shows the files that are waiting to be processed.
Actions
Logs show what happened in the past such as files being uploaded and downloaded, shared or sync’d and Stats just gives a summary of what the program has done.

Unlike Dropbox where a directory is placed on your computer where everything is sync SpiderOak uses the more traditional method of allowing users to choose the folders to be uploaded. This is the job of the Backup tab.

The View tab shows a list of files in a tree node structure similar to Microsoft Windows classic sidebar view. It’s quick and efficient but does not allow multiselect (to delete multiple backup files for example) nor any preview of the file. The view also shows the amount of space free and used by the backup in graphic form (where as the Status page show it in numeric format).

Sync allows multiple computers to share and keep files up to date with each other. This is the core of what Dropbox does.

SpiderOak also allows users to share access to other users. The difference with SpiderOak is that they allow other uses to login without a passwork. Also the public area is designated by yourself instead of SpiderOak where as Dropbox have public folders where files are shared and stored.

Initial Upload

As with any online backup systems there largest and longest part of process is the initial upload of the files. Fortunately SpiderOak compresses the files prior to upload making this process quicker. Dropbox does not do this making the initial upload longer. For some reason after every upload the files took a long to in the “finalizing” stage. Even if the file size was marked as 0 bytes? This occurred through the time I was using it.

Subsequent Uploads

Updating existing files for both services are fairly similar. Whilst Dropbox doesn’t compress the files to be uploaded it does upload only the changed bytes.

Sync

One disadvantage of SpiderOak is the the lack of LAN Sync. This greatly increases the speed of synchronization because the files are transfer over the network instead of out through the Internet and back again.

I encountered a server error 500 when I was adding a device which was running on Ubuntu 10.04 LTS. It quit automatically but when I went to add it again the device had been added to the list. I then had to go back and select reinstalling device so that I could select the device from a list instead creating one. There was about 1-2 minutes while it was doing a 10 step process but eventually loaded the normal SpiderOak interface.

Once the second computer was up and running I had to set up a new backup directory. This directory would be where files are synchronized to. I used my Dropbox directory as a test. I disabled Dropbox on both computers but ensuring they were both synchronized. Once that was done my Windows computer already had a backup set up of the directory and everything was uploaded. When I tried to add the second Linux computer’s Dropbox directory it kept complaining I didn’t have enough space and kept popping up with a message to buy more space. I thought the “advanced de-duplication” would see it was the same directory with the same stuff in it as the Windows computer! Alas it didn’t. To get it to work I renamed the Dropbox directory and created an empty folder, added it to be backed up and then I was able to select the 2 Dropbox directories from each computer for synchronizing.

Couple hours later and it has managed to create the folders on the second computer but still no files. This is unacceptable!

Pricing

As of 13/09/2011

• 2GB – Free
• 100GB – $10 per month or $100 per year for each 100GB

In comparison Dropbox charges $9.99 per month for 50GB which makes SpiderOak cheaper.

Summary

Security perspective it’s great but the trade off for that is recovery. The version backup is a major bonus but again the trade off is space. The latter isn’t an issue because you can turn off versioning to keep the space down.

The biggest issue I had with it was the Sync. The fact that adding the second computer’s directory as a backup with existing files in it causes it to spontaneously show the popup is unacceptable. Whilst I believe the merge tool was built for this situation I think it’s a flawed model. Also the time it took to Sync the files across was too slow. It was during peak time so my bandwidth was throttled by Virgin Media it should at least start to synchronize files across. In the end I gave up and went back to Dropbox.

Dropbox vs. the Alternatives: Which Online Syncing Service Is Right for You?

Related posts:

1. Sync Mozilla Thunderbird Using Dropbox
2. Microsoft FolderShare & iTunes Doesn’t Work
3. Dropbox Causes Duplicate Folders In Mozilla Thunderbird

I recently went abroad to Cyprus and got a chance to try using a VPN service “on the road”. I had my Android and Linux devices with mixed results. Please continue reading to find out more.

Ubuntu 11.04

I had used my new Acer Aspire One (AOD) with a fresh copy of Ubuntu 11.04 installed a week prior to going out. I had pre-configured the OS with the standard VPN end point with the generic WiTopia address (pptp.witopia.net) and also a London end point (pptp.lon.witopia.net).

I only used the netbook at the hotel which had a very good wireless coverage all the way from the room to the lobby. The fastest speed I saw was 65kbps down which was fairly good. On average I was seeing around 20-60kbps. Most of the time the generic address worked and took me to an American server (mostly in San Francisco). There were a few times which needed multiple attempts or reconnect after a disconnect but generally it was reliable to use.

I tried to connect to the London server first at all times but 99% of the time it failed. I was pushed for time so I did not do more than few attempts and eventually giving up to use the generic server so I am not sure why it would not work.

Android

There were a few open and free Wifi hot spots when I was going around town and a lot of them did not work with the VPN. The service would just not connect to any of the servers I had preconfigued on my phone and when it did it too slow or it seemed like there was no connectivity. I was using a HTC Desire running Cyanogenmod 7.0.3 with a baseband version 32.49.00.32U_5.11.05.27. The ROM was using Android 2.3.3. Even though the VPN did not work I had encountered a lot of UI issues including:

• Confusing VPN Status – There was only a key icon which appears in the notification bar but this does no indicate whether the VPN is connected or not connected until the notification bar is pulled down or you keep an eye on the notification bar to see if it connects / disconnects.
• Initiating Steps – The amount of steps it took to connect to the Wifi as well as the VPN was long!
• Searching For Open Networks – There was the ability to notify if an open Wifi was in range but that meant keeping the wireless on which would drain the battery faster than it already does. Everytime I had the chance I would get the phone out, turn the Wifi on using the built in power control in the pull down notification bar (love it!). Menu > Settings >Wireless & Networks and Wi-fi Settings to pray for an open hot spot.

Whilst there are apps to facilitate searching for wireless networks such as Wifi Analyser but it required another software for me to connect from within the app!

WiTopia

Speed through the VPN varied but there was a noticeable but negligible drop in speed as expected because I could only get onto a server in the US. Whilst it was a shame the UK server did not work, it still works a treat when I need to get some US streaming and well worth it when it works. As mentioned above a lot of the short comings are due to the software rather than the service.

Summary

I still like WiTopia as a service but the practicality of it made it less valuable. Whilst it worked well on stable and fast connections it was less usable on slower connections which is what most free and open hotspots were like. If I had more time to watch streaming media I would consider it as invaluable but I don’t. I also don’t travel as much as I’d like to so again it makes the price for the service harder to swallow.

I still have over half a year left and I shall see if I use it again between now and when it expires. I still have one trip abroad in the process of planning. As for using it on the phone, I would more or less completely rule it out.

Related posts:

1. WiTopia VPN Service Review

To resolve this, disable the password for Ubuntu’s keyring. This makes the stored passwords insecure but I only have a few passwords saved with the system keyring.

To disable the password go to Applications > Accessories > Passwords and Encryption keys or Alt+F2 to get the run box and type in seahorse (I do not know why it’s called seahorse).

The Passwords and Encryption Keys window should appear and under the Passwords tab there should be a list of passwords that it are saved already. Right click on the ones to remove the password and select Change Password. Enter the old password in the Old Password field and leave the rest blank. By the same token to reset the password complete all the fields. A warning about storing the passwords without a password should appear but select Use Unsafe Storage.

How To Remove Ubuntu’s Password Keyring

Related posts:

1. Security Holes & Backdoors In FreePBX
2. Enabling Remote Access To MySQL
3. KeePass Mini Review

Our Asus EEE PC 701 SSD failed when I tried to upgrade it from Ubuntu 10.10 to 11.04. I was in the middle of an install when it failed to copy a file and then there after it could not even boot from the HDD. Time for a replacement!

Why Have A Laptop And Netbook?

This all happened at a bad time because I was going on holiday soon and I was planning to take it with me. The EEE PC was a great travel companion because it was small, light and cheap which meant I had access to a computer (and Internet where possible) on holiday whilst not too worried about having hundreds of pounds worth of computer being damaged or stolen.

Netbook Vs. Tablet

When this all occurred, I was thinking of the possibility of replacement the netbook with a tablet. They fulfil more or less the same purpose of the netbook with a few pros and cons. Yes there is no keyboard for quick and comfortable typing and nor does it have the full range of applications a traditional desktop can offer but the boot time / always on and the optimized applications seem to counter those arguments (in my mind).

The biggest factor when I had decided was the price. Currently, a netbook can be had for aorund £230 and upwards. Cheaper for older models but tablets are currently are around £400+ excluding the Samsung Galaxy Tab 1010 but that has a 7″ screen with possible no outlook of getting new Android OS updates. This pretty much meant netbook was the only choice.

Linux Powered Netbook

Being the Geek that I am, I almost always do research before purchasing anything more than in your weekly shop. For this replacement netbook it was no different. What I was surprised about was the lack of netbooks with Linux on them. All the recent ones were powered by Windows 7 Starter edition. WHAT WENT WRONG!? I remember when netbooks just started out and almost all of them had Linux on them due to Microsoft’s License restrictions and more importantly the resource hog (compare to Linux) it was.

Alas the days of Linux powered machines look like they have gone and even Asus, the innovaters in netbooks are only selling Windows 7 on their machines. I was looking for a Ubuntu compatible device and it seemed it was fairly hard to find a 100% compatible netbook. I did encounter a Ubuntu hardware wiki which has a list of netbooks and their compatibilities but it was out of date but a good starting point.

The Chromebook was even less of an appeal and it’s untested. I cannot rely on having an Internet connection and have yet to hear the reviews or stories of it’s use. Availability was also an issue.

Acer Aspire One D255E (Intel N455)

After a long and hard search to find a Linux compatible system, I had decided to get the Acer D255E in red. There are 5 variants of the D25x which are D250 which is the first and oldest of the D25x range. Then came D255 which had the Intel Atom N255 processor. Then came the D255E which has the Intel Atom N450, N455 and N555. The main difference between the N45X and the N555 was the battery it came with. The latter having the larger 8 cell battery rated at 8 hours where was the former 2 have the 3 cell, 4 hours. The other smaller differences included DDR3 instead of DDR2 and slightly faster Front Side Bus (FSB). All in all I decided to go for the cheaper N455 version to save what was £30 at the time and coming in on budget of £200. This was a good result considering the inflation between 2007 and 2011 when I got the EEE PC 701 at the time.

From here on out I will be describing the D255E N455 only.

Initial Setup

I wanted to backup the system prior to doing anything in case I needed to return it. As per the usual Acer (and now pretty much all manufactures) has a recovery partition on their drive. Also the package did not include any restore media so if you break your Windows 7 Starter and your recovery partition, your out of luck because Windows 7 Starter is not available for purchase over the counter. People say you can contact Acer to get one if your willing to pay for the packaging and shipping costs but I think this is an oversight. All computers should come with system restore media. The good thing is you can create your own restore DVDs (note the plural!).

In order to create restore DVDs you must first boot into Windows and go through the registration to get to the Desktop. From there the start menu under Acer is Acer eRecovery Management. Starting this program allows you to create and restore from discs. This does mean you need an external DVD writer plugged in. The program will guide you through creating the 3 recovery DVDs. Once it was done time to get the Ubuntu 11.04 ISO out.

Installing Ubuntu 11.04

I created a bootable Ubuntu 11.04 USB stick to install from rather than using an external drive. The install process was fairly painless although during the HDD partition stage, I had to quit and go back into Windows to make sure I was selecting the correct partition (and not over write the recover and Android partitions).

Everything worked out of the box with the exception of the microphone. It was not picking up any sound but I think this is a Pulse Audio issue. To fix this do the following:
$ sudo apt-get update

$ sudo apt-get install pavucontrol
This will update the repository and install the pulse audio control panel. Once the install is complete, start the pulse audio control panel from the menu or by running the commal pavucontrol
Then select Input and reduce the input volume for either right or left. As soon as you do this the input volume bar will suddenly become active.

Some multitouch features work on the touch pad such as the right click when tapping with 2 fingers but I was unable to get the 2 finger scrolling to work.

Ubuntu 11.04

I like the Unity shell and find it usable for day to day tasks. As with any new software it does need a bit of work. The Ubuntu Software Center is a vast improvement over the old

The AOD 255E has a height of 600 pixels which meant most of the minimal sized windows fix with the exception of the buttons at the bottom of windows (if any). This means it has only lost 178 pixels to make the lowest resolution of 768.

Summary

Overall I’m very happy with the setup. Although there are things that can be improved upon such as ability to update Android or even restore the Android partition. Also there is no way to enable the android dual boot feature without Windows. I hate the loss of space for the recovery partition and as I do not know what will be restored with the restore DVDs, I’ve decided to keep them there for the mean time but the combination of Android and recovery partition take up approximately 50GB!

The EEE PC SD card slot was a lot deeper than the Aspire One which meant the card would be more or less sit flush to the edge of the computer. On this machine it sticks up by around 1cm which means the card cannot be left in there as extra space. This is a design flaw in my opinion.

I’m also more sensitive to the fact that it’s using a traditional HDD instead of a solid state so no more throwing it around whilst it’s on. The size of the netbook is a big step up compared to the old original EEE PC. Also the extra screen size and resolution helps.

Acer Aspire One D255 microphone?

Ubuntu 11.04 GNU/Linux on Acer Aspire One D255E

Ubuntu Hardware Wiki

Related posts:

1. IBM T60 + Ubuntu = Winner
2. VirtualBox With Ubuntu Quick Review
3. Back To Windows Vista

The package in Ubuntu does not use the standard dos2unix command and instead are:

• fromdos – same as dos2unix
• todos – same as unix2dos

This tool seems to be missing in version 10.04 and onwards.

dos2unix missing (Ubuntu 10.04)

Related posts:

1. WordPress Thumbnail Generation Greyed Out
2. Installing Ubuntu 8.10 From USB Stick
3. Ubuntu Server 7.10 (Gutsy Gibbon) To 8.04 (Hardy Herring)

UFW or Uncomplicated FireWall is a basic software solution for protecting against network intrusions. It’s basic in the form that it’s a wrapper around the more powerful and complex iptables and therefore makes some assumptions such as rate limits. There are no smart detection systems and adaptability but it also makes it very simple and easy to use. This is not to say it’s too basic but it will suffice in most situations just like Windows Firewall. As time has progressed, UFW has improved a lot with a lot added features.

Install

Installing UFW on Ubuntu is very simple:
$sudo apt-get install ufw

To get the GUI for UFW:
$sudo apt-get install gufw

The remaining part of this article will be describing how to use UFW from command line.

Port/Service Confirguration

After installing ufw it should be inactive. To find the status of ufw:
$sudo ufw status numbered

Inactive means the firewall is turned off but it will be made active on a reboot. Disabled means it is turned off and it will not start when the system is restarted. If ufw is installed on a remote system and only accessible via terminal I would recommend disabling ufw in the event the system goes down and when it comes back up could block remote terminal connections:
$sudo ufw disable

Another default that is applied to ufw is that the firewall is set to allow all which means all connections are able to connect to the computer system unless a rule exists. It’s often easier to deny all and allow specific protocols or ports. To do this run the following command:
$sudo ufw default deny

To revert the above command:
$sudo ufw default allow

The command format to allow or deny something is $sudo ufw / . For example to allow port 22 (SSH):
$sudo ufw allow 22
This will allow TCP and UDP type traffic through port 22. To specify the protocol just append it to the end:
$sudo ufw allow 22/tcp
Replace allow with deny to block connections:
$sudo ufw deny 22/tcp

To allow/deny a multiple / range of ports do the following:
$sudo ufw allow 21,22,80,1000:1024
The comma separated numbers are the individual ports whilst the colon means the range. The above command would have opened connections for ports 21, 22,80 and 1000-1024.

ufw recognizes some services. To get a list of the services perform the following command:
$sudo less /etc/services

Replace the port number with the service name:
$sudo ufw deny ssh

To delete a rule, add the keyword delete after ufw and before the allow/deny switch:
$sudo ufw delete deny 22/tcp
or by using the status command and deleting by number from the left hand side:
$sudo ufw delete 2
will delete the second rule listed in the ufw status printout.

If ufw is enabled, running the status command will also list the rules that have been entered.

The defaults and rules can be applied to outgoing connections too. Here are some examples:
$sudo ufw default deny outgoing
Stops all outgoing connections by default

$sudo ufw default allow outgoing
Reverts back to allow outgoing connections

$sudo ufw allow out 22
Allows outgoing connections on port 22.

$sudo ufw allow out to 192.168.0.1 port 22
Allows outgoing connections from port 22 to machine 192.168.0.1

Source Configuration

Adding “from ” will permit or refuse connection from a specific IP address:
$sudo ufw deny from 192.168.0.1
The above command will block all connection requests from 192.168.0.1.

To block a range of IP addresses, do the following:
$sudo ufw deny from 192.168.0.1 to 192.168.0.254

Source settings can also be applied to specific ports/services like this:
$sudo ufw allow from 192.168.0.1 to any port 22/tcp

Rule Conflicts

Depending on the order the rules were added will depend on which rules are evaluated first. Using the commands described above here is Scenario 1:

$sudo ufw default deny
$sudo ufw allow 22
$sudo ufw deny from 192.168.0.1 to any port 22

With the allow port 22 added first, the computer with 192.168.0.1 will still be allowed to connect to port 22 because ufw see’s that 22 is allowed and it will not evaluate any rules below it. To fix the problem the commands should be entered in the following order:

$sudo ufw default deny
$sudo ufw deny from 192.168.0.1 to any port 22
$sudo ufw allow 22

The most generic and therefore open rule should be last with more specific rules added first. The ufw status command will list the rules in place in the order they were added / evaluated.

To insert a new rule in a specific position, use the status command with the option numbered:
$sudo ufw status numbered
This will list all the exist rules with a number index on the left hand side.

Create a new rule as per normal but add insert before the rule to specify the order it should be inserted in:
$sudo ufw insert 2 deny from 192.168.0.1 to any port 22
The above rule will be inserted in position 2 and move the old 2 and below rules down 1 place.

Limiting Connections

In place of opening a service / port there is also limiting. The rule for the limit is:

ufw supports connection rate limiting, which is useful for protecting against brute-force login attacks. ufw will deny connections if an IP address has attempted to initiate 6 or more connections in the last 30 seconds.

I have not seen any article on how to change the limit rules.

To use the connection limiting function, replace the word allow with limit. For example:
$sudo ufw limit 22

If an allow rule exists for port 22, it should be removed otherwise ensure the limit rule is above the allow rule.

Common Server Ports

Below is a list of common ports to be left open. Whilst not all of them are applicable or the same it’s worth considering:

• 20, 21 – FTP for unsecure file transfers. I’d recommend using SFTP or FTPS which usually reside on a different port. Also try and use the limit firewall rule instead of allow to minimize brute force attacks.
• 22 – SSH is a must and is used by FTPS and other secure services such as SCP. I’d recommend changing the SSH port to something more obscure. Also it’s worth using the limit firewall rule to prevent brute force attacks.
• 25 – SMTP for routing email. It’s not necessary to open if
• 80 – HTTP or webserver port. Leave this open if a webserver is running such as Apache.
• 161,162 – SMNP used to monitor server status.
• 220 – IMAP for client email access
• 443 – HTTPS secure web traffic if supoorted.
• 465 – SMTP over SSL for secure email access.
• 3306 – MySQL database port. I’d recommend not opening this port up and use SSH tunneling for more secure approach. If it’s necessary to open the port then use limit unless it causes connection issues.

Summary

ufw is a nice wrapper to enable and disable ports and the syntax used are fairly logical and human readable. I would like to see more work done on the limit command which limits the connections coming in (and hopefully soon) going out.

http://gliderservices.no-ip.org/blog/?p=9

Linux Server Security – Ubuntu’s ufw Firewall Configuration Tool

Related posts:

1. Setting Up CUPS (Print Server) On Ubuntu 8.04
2. SSH On Multiple Ports
3. Apache 2 Hardening Tips

Disable Directory Listings

First directive to change is to stop people browsing through files when a user types in a web address which leads to a folder.

Edit the file /etc/apache2/sites-available/default
changing default for the site config file.
$ sudo service apache2 restart
Find Indexes from the options under the Directory directive and add a subtract sign to disable the option. For example:
<Directory /var/www/>
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>
Becomes
<Directory /var/www/>
Options -Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

mod-evasive

As a last measure from a DDOS attach, Apache has a module which black lists IP addresses temporarily. The default rules are:

1. Requesting the same page more than a few times per second
2. Making more than 50 concurrent requests on the same child per second
3. Making any requests while temporarily blacklisted (on a blocking list)

$sudo apt-get install libapache2-mod-evasive

mod-security

Helps stop some injection and Server Side Includes (SSI) attacks:
$sudo apt-get install libapache2-mod-security2

Remove Server Signature & Information

Turn off server information such as version of Apache and HTTP header server information.

$vi /etc/apache2/conf.d/security

Find the following and change the values to Prod and Off
ServerTokens Prod
ServerSignature Off

Update Apache

Keep the software as up to date as possible. New version come out all the time with various fixes and security patches. Fortunately, Debian based systems such as Ubuntu makes this really easy:
$sudo apt-get update && sudo apt-get dist-upgrade

Last thing to do is to restart the server for the changes to take hold. Any mis-configuration should be reported when the server tries to start back up. It might be easier to restart after each change to make troubleshooting easier.

Below are some use case specific ways to enhance security. If the below changes breaks a site then revert the changes but for most home uses they can generally be turned off.

Disable SSI

Add a minus sign in front of Includes. E.g:
<Directory /var/www/>
Options -Indexes -Includes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

Disable CGI

Add / modify ExecCGI in the directory directive:
<Directory /var/www/>
Options -Indexes -Includes -ExecCGI FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

Disable Symbolic Links

Remove / add a hyphen to FollowSymLinks to disable sym links (like shorts in Windows terms):
<Directory /var/www/>
Options -Indexes -Includes -ExecCGI -FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
allow from all
</Directory>

Disable All Options

To remove all options above just remove all the options and add the word None
<Directory /var/www/>
Options None
AllowOverride None
Order allow,deny
allow from all
</Directory>

Almost Secure and Perfect Ubuntu Server

Security Tips

20 ways to Secure your Apache Configuration

How to harden Ubuntu 10.04 LTS + LAMP

Related posts:

1. WordPress Permalink Change Error
2. Ubuntu 10.04 Firewall (UFW) Basics
3. Setting Up CUPS (Print Server) On Ubuntu 8.04

Invalid command ‘Header’, perhaps misspelled or defined by a module not included in the server configuration

$sudo a2enmod headers to enable the headers module

$sudo service apache2 restart to restart the server for the module to take effect.

Related posts:

1. Invalid Command ‘ExpiresActive’
2. WordPress Permalink Change Error
3. WordPress Twitter Tools Shows Blank Page On Connect

Invalid command ‘ExpiresActive’, perhaps misspelled or defined by a module not included in the server configuration
…fail!

To fix it ensure the “expires” module is loaded:
$sudo a2enmod expires

Then restart Apache server
$sudo service apache2 restart

Related posts:

1. Invalid Command ‘Header’
2. WordPress Permalink Change Error
3. Apache 2 Hardening Tips

First thing to do is install the script
$sudo apt-get install chkrootkit

Next run it:
$sudo chkrootkit
or redirect the output to a file
$sudo chkrootkit > rootkit.txt
That’s it!

Related posts:

1. Mounting / Extracting .bin and .cue Files In Ubuntu
2. Check GUI Program Is Running In Linux
3. Bash Sleep vs. Wait

To turn on cluster logging the cluster needs to be started with a log level. For example dvdrip-master 2 where 2 is the log level where:

• 1 – Basic information
• 2 – Job logging
• 3 – All

It is best not to run the cluster in the background when using logging to see what is going wrong.

The error I was getting was Warning: No libxvidcore API 4 found To fix the issue install libxvidcore4: sudo apt-get install libxvidcore4 Shutdown the cluster and exit dvd::rip and start again. This time it should not report the warning.

DVD::RIP Problem

Related posts:

1. dvd::rip
2. bash: man: command not found
3. Waking Windows 7 Controller Error

There are plenty of exceptions where hardware and software abstractions are used to create modular and flexible designs in a modern OS. Examples can be seen from Microsoft’s .Net Framework to Virtualization.

Logical Volume Management or LVM is no exception. It allows the separation of physical disk storage devices to a software layer allowing for partitions to span across multiple disks to only appear as one drive to the user.

What Is LVM

LVM allows a volume to be resized with less dependency no physical hard disks. In LVM, physical hard disks are referred to as physical volumes of PV. Each hard disk may contain more than one volume just like a hard disk can be partitioned many times.

A Logical Volume (LV) is a software managed volume. This allows the LV to extend or contract in size as and when needed. As time goes on more disks can be added and the LV can expand to take advantage of the disk without referring to each new additional drive as a separate drive e.g in Windows world E:\ currently exists with 100GB with a new drive added, it must be mounted on another drive letter e.g F:\ with 200GB. Using LVM E:\ will remain as a drive but the second drive will be added to E:\ making it appear as though drive E:\ has 300 GB, 100 GB from the original drive and 200 GB from the new drive.

Similarly the drives can be removed from the LVM if the drive is to be removed or used for another purpose. Reducing the size is more dangerous than expanding one and also all the existing data needs to fit onto the remaining drive space.

LVM should be used from the start as it requires the disk to be formatted / partitioned. LVM can consist of one disk and more can be added later.

History

I have encountered LVMs when Fedora first came out but never really understood / utilized them. It did not help that Ubuntu never had any user friendly way to configure them and Gparted, my preferred disk partition manager did not support LVM.

Fedora / Redhat had always supported LVM very well and now Ubuntu is starting to catch up. The GUI still has some way to go but it’s improving all the time.

LVM has also moved to version 2 with the Linux 2.6 kernel and is the version this article will document.

Install LVM And Tools

The remainder of the article will document setting up and configuring LVM on a Ubuntu 10.04 system. LVM is used in other Linux distributions and the commands may be common across all platforms but some may be Ubuntu specific.

1. Install LVM and GUI configuration tool
   sudo apt-get install lvm2 system-config-lvm
2. Install a partition editor Gparted
   sudo apt-get install gparted

Preparing Disk For LVM

1. Ensure the hard disk / partition is in the machine. If not then shutdown the system, attach the disk and start the computer up again.
2. Start Gparted

System > Administration > Gparted

3. Select the disk in the upper right drop down list.
4. If it’s a new device a partition table needs to be created
   Device > Create partition table...
   
5. Create an unformatted partition
   Right click on the disk allocation > New
   
6. Select unformatted as the File System and change the partition size if necessary / not using the whole disk. Leave the rest as is unless
7. Click OK to create the partition.
8. Note the partition number in the list below the graph. In the picture below this is /dev/sdb1
   
9. Repeat above steps to prepare any other hard disks to be used in LVM.
10. Create / prepare the physical volume (hard disks)
    sudo pvcreate /dev/sdb1
    where /dev/sdb1 is the partition. This can be obtained from Gparted. Multiple partitions can be created by adding each one after the other in pvcreate command. e.g sudo pvcreate /dev/sdb1 /dev/sda1 /dev/sdc1

Creating Volume Groups

1. Create a Logical Volume group. Each group can have multiple volumes but a group will share the same physical volumes / hard disks. To create a LV, it must be associated with at least one physical volume.
   sudo vgcreate lvm1 /dev/sdb1
   where lvm1 is my group name and /dev/sdb1 is the PV allocated to lvm1.

Create Logical Volumes

1. Create a volume in the group.
   sudo lvcreate -L931.5G -nhome lvm1
   where -L99G is the size of the volume. In this example it is 931.51 GB. Different units can be used such as MB. -nhome is the name of the volume and lvm1 is the volume group.
2. Repeat above step to add as many volumes as you wish. Each volume is treated as a individual “drive” changing the volume name each time as a minimum.

   Although Gparted now shows the partition as being formated to lvm2, it is actually not formatted. Just like creating a partition it does not format the drive for use, creating a volume so far has only created the space for the LV.

3. Format LV to EXT4 (any file system can be used)
   mount -t ext4 -j /dev/lvm1/home
   Note that you specify the logical volume and not the physical volume. -t is the file format and -j means use journalling.

Mounting Logical Volumes

1. To mount the new volume it will be located in /dev/[volume group]/[volume] for example /dev/lvm1/home The full command to mount the drive would be sudo mount /media/home /dev/lvm1/home

LVM GUI Tool

As part of the install of LVM there was a GUI tool installed as well system-config-lvm. To start the tool go to Applications > System Tools > Logical Volume Management

So far in the example used in this post, one LVM group with one physical volume has been create. This can be seen in the LVM tool:

Adding More Space to a Volume

A new drive or partition would be needed to extend the volume group size. How the spare space is allocated to each volume can be managed separately.

1. Prepare the new disk / partition as in the above sections depending on the state of the drives. See Preparing Disk For LVM
2. Add the newly prepared disk to the LVM group
   sudo vgextend lvm1 /dev/sdd1
   where lvm1 is the group name and /dev/sdd1 is the partition name.
   The disk has been added to the group however the free space have not been allocated to volumes yet.
   
3. To allocate the free space to a volume it needs to be extended to take up the freespace:
   sudo lvextend -L+931.51G /dev/lvm1/home
   where -L+931.51G is how much to allocate and /dev/lvm1/home is the volume to make bigger.
   

Removing Disk From LVM

Ensure the data currently on the LVM can fit onto any disks that remain attached to a LVM group. It is advised that a backup is taken before continuing.

1. Umount the LV
   sudo umount /dev/lvm1/home
2. Perform a check disk and fix any disk errors
   sudo e2fsck -f /dev/lvm1/home
3. Resize the volume
   lvreduce /dev/lvm1/home -L931.5G
4. Commit the resize to disk and not just the LVM
   sudo resize2fs /dev/lvm1/home
5. Remove partition from LVM group
   sudo pvmove /dev/sdd1

Migrating LVM

If you need to format and reinstall your OS or move your LVM storage to a new machine it needs to be prepared for that prior to moving it.

1. Unmount the volume
   sudo umount /dev/lvm1/home
2. Make the volume inactive
   vgchange -an lvm1
3. Export the group so that it can be read by another system
   sudo vgexport lvm1
4. Power down and remove / format system disk.
5. Import LVM
   sudo vgimport lvm1
6. Reactivate the group
   sudo vgchange -ay lvm1

Useful Commands

• sudo pvscan
  Lists all the physical volumes attached to the machine with information such as size of disk and amount free. It will only list PVs of drives which have had the command pvcreate used on them.
• sudo pvdisplay
  Displays a list of physical volumes with their information such as which LV group they belong to, if they have been allocated, etc/
• sudo lvscan
  Lists all the volumes on the machine with their status.
• sudo lvdisplay
  Sam as lvscan but with more information.

Summary

LVM is a very clean way to allow for volumes to be expanded without impacting current software or setups. It helps to alleviate problems when disk drives run out of space and is a bonus to allow drives to be kept rather than replaced. It is advised that the process is done at the beginning of an install to avoid migrating the data from a non-LVM disk to a LVM space. It took several hours to copy just under 1TB from one system to the other.

SettingUpLVM-WithoutACleanInstall

How do i remove a disk from an LVM?

Moving a volume group to another system

Related posts:

1. Resizing VirtualBox Disk
2. W00t! 3 Hour Wait
3. My Performance Tweaks To Ubuntu

I have several extensions on my Asterisk / FreePBX box but currently only one landline. Ring groups solved the problem of one incoming call ringing multiple handsets but there was only one official solution to sharing voicemail.

Voicemail Blasting (VMB)

VMB is a way of disseminating incoming voicemail to multiple voicemail boxes. For example someone lease a message on voicemail for one extension. When the person has finished leaving a message, VMB copies that message and puts it into designated extension voicemail boxes for other extensions to receive. The problem with this setup is that the voicemail may be heard from one extension and deleted but it still remains on others.

Symbolic Links To The Rescue

I found a neat trick to fool FreePBX / Asterisk to get multiple voicemail boxes pointing to one. The great point about this is that each extensions keeps most of their settings separate so things like password can be different for each extension but the messages are shared. This means one person can delete the message from one phone and another user will not see the message (maybe except in the trash).

How To

I have FreePBX running on a Ubuntu 10.04 install. First thing is to create all the extensions and enable voicemail on all of them.

Identify the one extension which will be shared amongst all others e.g 200.

Go to /var/spool/asterisk/voicemail/default Check if there’s a folder with the extension number of your designated voicemail. If not leave a message on extension 200 and it should create one.

Remove all other extensions which should share the same inbox as extension 200, e.g 201 and 202 sudo rm -rf 201 and replace 201 with 202 etc.

Switch user to the Asterisk user. This is needed because the original directories were “owned” by the Asterisk user. Once created also ensure the symbolic links have at least the same or more permissions as extension 200 (or the shared voicemail box) sudo su asterisk

Create a symbolic link to 200 with the previously removed folder names ln -s 200 201ln -s 200 202

Summary

This is a cool trick which should be transparent to FreePBX / Asterisk unless they change the way voicemail works. Updates and modules should not see any difference because the symbolic links point to a real directory.

Also it is easy to revert any extension back to having their own voicemail box or even create multiple shared voicemail boxes by removing the sym link and creating a new one to point to another extension directory.

How to make multiple extensions use a common voicemail box

Related posts:

1. Remote Extension In FreePBX
2. Siemens Gigaset 685IP Mini Review
3. Linksys SPA3102 And FreePBX On Ubuntu 10.04

Related posts:

1. Sync Mozilla Thunderbird Using Dropbox
2. VirtualBox With Ubuntu Quick Review
3. My Windows 7 Shortcuts

When I use VNC Client to remote desktop onto my Ubuntu 10.04 I got the background and maybe even the Gnome panel but the windows and programs were not appearing on the screen. However my mouse and clipboard was still working so I had ended up VNC’ing to the box and switching the display to another source.

To fix this problem just disable the visual desktop effects under System > Preferences > Appearance Under the Visual Effects tab set it to None.

VNC – remote desktop does not refresh

Related posts:

1. Ubuntu 7.10
2. Re-discovering Linux
3. Ubuntu No Monitor Defaults To 800×600

I wanted to setup a Private Branch eXchange(PBX) system using Asterisk server at home. As I already had a traditional land line (PSTN or POTS line) I needed something to bridge the computer to the land line. My idea of having a PBX at was to route as many calls over VOIP which tends to be cheaper like Skype and still use a traditional landline for emergencies as well as just having a landline number.

History

Originally I started writing a post on how to get a PBX with a web interface going on Ubuntu 8.04. However once I had it all installed it wasn’t working 100%. I had issues with permissions and FreePBX had problems with the operation panel. Fast forward 2-3 years and I’m back doing it again but this time on the next LTS release and 7 minor release later from FreePBX.

Ubuntu 10.04 LTS

Asterisk

Asterisk is a free and open source software for PBX. It’s what you see in companies to manage and route all their phones calls. Asterisk is a PBX engine which has several front end engines and even a distribution specially for PBX box called Trixbox. If you just want a headless PBX then installing Asterix will suffice however I was not technically skilled enough to create all configuration files from scratch and also a nice front end will go a long way for the Wife Acceptance Factor (WAF). This is where FreePBX comes in.

FreePBX

FreePBX is GUI interface wrapper for Asterisk. Ubuntu has a FreePBX package in it’s repository. FreePBX uses a web front end so it can be accessed anywhere and makes administration a lot easier. It uses modules to extend the functionally like add-ons in Firefox. These include group pickup to Parking Lots.

With FreePBX this sorts out the software side of my PBX.

Linksys SPA3102

This an Analogue Telephone Adaptor(ATA) which is used to convert a land line to a digital network and a traditional land line phone to the network too. The hardware has been around for a long time and it does work with Asterisk. The SPA(Sipura)3102 can be used as a standalone PBX box too but in my case it will be used to forward incoming and outgoing calls.

The SPA3102 also has a web interface but it can also be used to act as a router at the same time. The web interface is very basic and not very user friendly but has a lot of options making it very customizable and configurable.

Asterisk And FreePBX Install

Switch to root user before installing sudo su.

Install MySQL sudo apt-get install mysql-server
When prompted for password enter one.

Install MySQL modules, PHP, kernel headers for compiling code, apt-get install build-essential linux-headers-`uname -r` openssh-server bison flex apache2 php5 php5-curl php5-cli php5-mysql php-pear php-db php5-gd curl sox libncurses5-dev libssl-dev libmysqlclient15-dev mpg123 libxml2-dev

Go to /usr/src cd /usr/src/
and download the Asterisk source files

xargs wget << SOURCES

http://downloads.asterisk.org/pub/telephony/dahdi-linux-complete/releases/dahdi-linux-complete-2.2.1+2.2.1.tar.gz

http://downloads.asterisk.org/pub/telephony/libpri/releases/libpri-1.4.10.2.tar.gz

http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-1.6.2.6.tar.gz

http://downloads.asterisk.org/pub/telephony/asterisk/releases/asterisk-addons-1.6.2.0.tar.gz

SOURCES

Un-tar(zip) all the source files in /usr/src/ tar xvf dahdi-linux-complete-2.2.1+2.2.1.tar.gz
tar xvf libpri-1.4.10.2.tar.gz
tar xvf asterisk-1.6.2.6.tar.gz
tar xvf asterisk-addons-1.6.2.0.tar.gz

Compile Asterisk in the following order:
cd dahdi-linux-complete-2.2.1+2.2.1
make all && make install && make config
cd ../libpri-1.4.10.2
make && make install
cd ../asterisk-1.6.2.6
./configure
make && make install
make samples
cd ../asterisk-addons-1.6.2.0
./configure
make && make install
make samples
Download and extract extra sounds cd /var/lib/astersik/sounds
wget -O - http://downloads.asterisk.org/pub/telephony/sounds/asterisk-extra-sounds-en-gsm-current.tar.gz | tar xvfz -

Create an Asterisk user account on the Linux box adduser asterisk --disabled-password --no-create-home --gecos "asterisk PBX user"
adduser www-data asterisk

Make a backup of the Asterisk configuration file cp /etc/apache2/apache2.conf /etc/apache2/apache2.conf_orig

Change the Asterisk config to run as a correct user sed -i 's/^\(User\|Group\).*/\1 asterisk/' /etc/apache2/apache2.conf

Create the Asterisk service script which will start and stop the Asterisk demon:

cat > /etc/init.d/asterisk <<-END_STARTUP
#!/bin/bash
### BEGIN INIT INFO
# Provides: asterisk
# Required-Start: \$network \$syslog
# Required-Stop: \$network \$syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Asterisk daemon.
# Description: This script handles start/stop states of asterisk.
### END INIT INFO

set -e
set -a
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
DESC="Asterisk"
NAME=amportal
DAEMON=/usr/sbin/\$NAME

test -x \$DAEMON || exit 0

d_start() {
amportal start
}

d_stop() {
amportal stop
}

d_reload() {
amportal restart
}

case "\$1" in

start)
echo -n "Starting \$DESC: \$NAME"
d_start
echo "."
;;

stop)
echo -n "Stopping \$DESC: \$NAME"
d_stop
echo "."
;;

restart|force-reload)
echo -n "Restarting \$DESC: \$NAME"
d_stop
sleep 10
d_start
echo "."
;;

*)

echo "Usage: \$SCRIPTNAME {start|stop|restart|force-reload}" >&2
exit 3
;;

esac

exit 0
END_STARTUP

Ensure the permissions of the demon script is correct chmod 755 /etc/init.d/asterisk

Make Asterisk start up when the computer starts update-rc.d asterisk defaults 90 10

Download and extract FreePBX
cd /usr/src/
wget -O - http://mirror.freepbx.org/freepbx-2.7.0.tar.gz | tar xvfz -
cd freepbx-2.7.0/

Copy the Amportal configuration cp amportal.conf /etc/

Set environment variables for the current session. These variables will store the password for MySQL access so that the script can be 100% automated. One is the admin password and the other is the Asterisk database user password. These variables should clear once the terminal session ends but it is advised to remove them from the bash history in ~/.bash_history
export MYSQL_ROOT_PW=abcd
export ASTERISK_DB_PW=wxyz

Run the database scripts:
mysqladmin -u root -p${MYSQL_ROOT_PW} create asterisk
mysqladmin -u root -p${MYSQL_ROOT_PW} create asteriskcdrdb
mysql -u root -p${MYSQL_ROOT_PW} asterisk < SQL/newinstall.sql
mysql -u root -p${MYSQL_ROOT_PW} asteriskcdrdb < SQL/cdr_mysql_table.sql

mysql -u root -p${MYSQL_ROOT_PW} <<-END_PRIVS
GRANT ALL PRIVILEGES ON asterisk.* TO asteriskuser@localhost IDENTIFIED BY "${ASTERISK_DB_PW}";
GRANT ALL PRIVILEGES ON asteriskcdrdb.* TO asteriskuser@localhost IDENTIFIED BY "${ASTERISK_DB_PW}";
flush privileges;
END_PRIVS

Edit the amportal configuration file with the database username and password
sed -i "s/# \(AMPDBUSER=.*\)/\1/" /etc/amportal.conf
sed -i "s/# \(AMPDBPASS=\).*/\1${ASTERISK_DB_PW}/" /etc/amportal.conf
sed -i "s@\(AMPWEBROOT=\).*@\1/var/www/@" /etc/amportal.conf
sed -i "s@\(FOPWEBROOT=\).*@\1/var/www/panel@" /etc/amportal.conf
sed -i "s@\(FOPWEBADDRESS=\).*@PUTIPADDRESS@" /etc/amportal.conf

Change the max PHP file upload size to 120mb in Apache
sed -i 's/\(^upload_max_filesize = \).*/\120M/' /etc/php5/apache2/php.ini

Change the files and directories so that Asterisk has access to them
chown asterisk. /var/run/asterisk
chown -R asterisk. /etc/asterisk
chown -R asterisk. /var/{lib,log,spool}/asterisk
chown -R asterisk. /var/www/

Remove line ending from the Asterisk configuration file.
sed -i '1 s/\(\[directories\]\).*/\1/' /etc/asterisk/asterisk.conf

Start Asterisk
./start_asterisk start

Install FreePBX
./install_amp

Restart Apache server
/etc/init.d/apache2 restart

Create a symlink to the "Music On Hold"(MOH) files
ln -s /var/lib/asterisk/moh /var/lib/asterisk/mohmp3

Start FreePBX
amportal start

Asterisk / PBX Terminology

Before I go into configuring the PBX itself it is worth knowing the terminology behind the technology.

• Extension - Can be considered as an internal phone number. Each extension can be associated with a user and the user and the user can "roam" from phone to phone keeping their phone number.
• Feature Codes - Special phone numbers which can put an extension to do not disturb (DND) so that no phone calls will get through to accessing voicemail.
• Trunk - Provides services to the PBX such as land line or to allow calls to another PBX.
• Routes - The path a call may go. Routes consists of inbound, calls coming in and outbound, calls leaving the system routes.
• Dial Rules - Rules defined in ASCII characters which govern routes e.g Only free phone numbers are allowed to take the land line route. All other numbers should go out to a VOIP provider.
• Channels - Number of simultaneous calls a trunk can handle

Configure FreePBX

First thing to do is set up extensions. Extensions are independent to any available routes as by default Asterisk treats any number dialled as an internal number. Below are steps to create 2 extensions. One number will eventually be assigned to the phone attached to the Linksys SPA3102 and the other for another hard/softphone.

1. Go to Setup > Basic > Extensions menu item.
2. Ensure "Generic SIP Device" is selected in the Devices drop down box.
3. Enter the following details:
1. User Extension - Phone number of extension E.G 1000
2. Display Name - Friendly name
3. Voicemail & Directory Status - Enable this if you want the user to have voicemail facilities
4. Secret - Leave blank for now but this is the password for the extension.
4. Submit the changes.
5. Click on the new extension listed on the right hand side of the Extensions page. This will edit the extension
6. Under Device Options section change the Mailbox by removing the @device suffix and just leave the extension number in the field.
7. Submit the changes again.
8. Repeat the steps above again to create a second extension, changing the extension number, display name and the mailbox setting E.G 1001
9. Apply the changes to make it take effect.

At this point I would download a SIP softphone such as X-Lite on two computers and test out the 2 extensions created. Using the X-Lite or other softphones is beyond this article.

For Dialling out of the Sipura 3102 a Trunk is needed as well as configuring the outbound route.

1. Go to Setup > Basic > Trunks in FreePBX
2. Click on the Add SIP Trunk
3. Fill in the following fields:
1. Trunk Description - A friendly name for the trunk. This can be anything
2. Outbound Caller ID - Full telephone number of the landline including area code.
3. CID Options - Any
4. Maximum Channels - 1
5. Dial Rules - Leave blank
6. Outbound Dial Prefix - Leave blank
7. Trunk Name - A memorable name which will be used in the Sipura configuration
8. Peer Details:
   

   canreinvite=no
   context=from-pstn
   host=[host]
   nat=no
   port=5061
   type=friend
   qualify=yes
   dtmfmode=rfc2833

   Change [host] to the IP address of computer hosting Asterisk / FreePBX and [username] to username to be used by Sipura

9. Leave the remaining fields blank.
4. Submit Changes.
5. Go to Setup > Basic > Outbound Routes
6. Click on 0 9_outside (or create a new one)
7. Change the settings to as follows:
1. All fields should be blank or left as default up to Dial Patterns.
2. Dial Patterns - 9|.
3. Trunk Sequence - Select the Trunk created above.
8. Submit changes.
9. Apply the changes.

The above setting outbound route requires a 9 to be dialled followed by the number to be dialled. The dial pattern can be changed later.

Create a new inbound route for the landline to Asterisk via SPA3102:

1. Go to Setup > Inbound Call Control > Inbound Routes
2. Change the following settings:
1. Description - A meaningful name for the inbound route
2. DID Number - Enter the landline telephone number including the area code.
3. Set Destination - Set where the landline call should go to. This can be voicemail or an extension
3. Submit changes.
4. Apply Settings

It is worth mentioning here that there is a module in FreePBX called Ring Group which would allow a group of extensions to be named as a destination. This means anyone in the group will have their phone ring when someone rings the landline.

As a recommended step check if a password has been set on the admin web page. Clear out the browser's cookies and cache. Go to the Freepbx page and click on the FreePBX Administration link it should prompt for a password. If not edit the default admin account or add a new account under Setup > Basic > Administration

Notice there is a warning under "General Settings". This means the authentication has not been turned on. Submit the changes and apply them once completed. Go to the Freepbx box and edit the file /etc/amportal.conf Look for the line AUTHTYPE=none and change it from none to database.

Setting Up SPA3102

Out of the box the ATA is configured to act as a router and has the web interface disabled on the WAN port. I will be putting SPA3102 into an existing network so I need to enable the WAN port and turn off the DHCP. The WAN port needs to be enabled so that it can connect to the local network instead of the box expecting a modem and turning off DHCP will stop two devices assigning an IP to the computers on the network.

Plug a telephone into phone socket of the SPA3102 and the power in the power socket. Pick up the phone and dial ***** (5 asterisks) and then 7932 and then 1. Hang up or press #.

Now plug the network cable into the Internet port of the SPA3102 NOT THE ETHERNET PORT. Point your browser to the IP address of the SPA3102. To find out what the IP is you should be able to check on your router or dial ***** (5 asterisks) > 110 on your phone.

Just like a router, a webpage with settings and status of the device should appear. Use the screenshots below and set all the settings below:

The settings are for UK and I have change the tones in the Voice > Regional settings. Others such as the daylight savings are aligned to the UK time zone.

The following needs to be configured according to the environment.
Voice > Line 1 > Proxy and Registration

• Proxy - IP address of the Linux box which will host the Asterisk and FreePBX software.

Voice > Line 1 > Subscriber Information

• User ID - Extension set in FreePBX
• Password - Leave blank initially for easier debugging but it should match the secret settings in the extensions

Voice > PSTN Line > Proxy and Registration

• Proxy - IP address of the Linux box which will host the Asterisk and FreePBX software.

Voice > PSTN Line > Dial Plans

• Dial Plan 2 - S0(<:xxxxxxxxxx>) where x is the phone number of your land land including the area code e.g 01323123456

Asterisk
Trixbox
FreePBX
Installing Asterisk and FreePBX on a vmware instance of Ubuntu 10.04 (Lucid) alpha3

Related posts:

1. FreePBX – Common Voicemail Box
2. Remote Extension In FreePBX
3. FreePBX Symlink From Modules Failed

The file managed to fill my 250GB hard drive when Ubuntu 10.04 started to complain. After removing the file using the command line all was fine again.

Related posts:

1. MediaTomb DLNA To Playstation 3
2. My Performance Tweaks To Ubuntu
3. Microsoft Publisher 2007 Freezing Problems

That’s it. It should install and even add the printer automatically.

Related posts:

1. Setting Up CUPS (Print Server) On Ubuntu 8.04
2. Installing IPP Printer On Ubuntu
3. Microsoft Word Crashing Frequently