<div>Vou ter que discordar com vocês que rodar ssh na porta 22 é arriscado, se o ssh da maquina estiver atualizado não tem problema algum ! </div>
<div>Na minha opinão o importante é patchear o kernel com uns security patchs, e deixar todos processos da maquina atualizados.</div>
<div>Claro que um firewall bem feito também ajuda, caso haja algum bug na maquina. </div>
<div>Mas a principio tem de se deixar tudo atualizado. </div>
<div>Uma outra dica é não deixar teu ssh liberado para acesso root. depois pra você pegar root basta dar um su.</div>
<div> </div>
<div>espero ter ajudo em algo.</div>
<div> </div>
<div>abraços.<br> </div>
<div><span class="gmail_quote">Em 10/12/05, <b class="gmail_sendername">Ossi Sariola</b> <<a href="mailto:posti01@poboxes.com">posti01@poboxes.com</a>> escreveu:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Opa! Sem problemas…</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Sugiro fazer isso local, já que é mais fácil de mudar se algo sai errado.</span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">oZ</span></font></p>
<div>
<p><font face="Arial" color="navy" size="1"><span lang="PT-BR" style="FONT-SIZE: 8pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p></div>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> Josué Conti [mailto:
<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:josueconti@gmail.com" target="_blank">josueconti@gmail.com</a>] <br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Saturday, December 10, 2005 5:18 PM
<div><span class="e" id="q_1081630d4593ecdf_1"><br><b><span style="FONT-WEIGHT: bold">To:</span></b> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:asteriskbrasil@listas.asteriskbrasil.org" target="_blank">
asteriskbrasil@listas.asteriskbrasil.org</a><br><b><span style="FONT-WEIGHT: bold">Subject:</span></b> Re: [AsteriskBrasil] regras do ip tables</span></div></span></font>
<p></p></p></div>
<div><span class="e" id="q_1081630d4593ecdf_3">
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Oz, muito obrigado.</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Consigo fazer isso via ssh, ou tenho que fazer via local?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Desde já agradeço a atenção.</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">PS: Após esta operação executo um iptables-restore, né?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Abraço</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Josué<br><br> </span></font></p></div>
<div>
<p><span><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Em 10/12/05, <b><span style="FONT-WEIGHT: bold">Ossi Sariola</span></b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:posti01@poboxes.com" target="_blank">
posti01@poboxes.com</a>> escreveu:</span></font></span> </p>
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Josué,</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Simples, no Putty antes de acessar, mude a porta para aquele que você mudou no sshd_config.</span></font>
<span lang="PT-BR"> </span></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Abraços</span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">oZ</span></font></p>
<div>
<p><font face="Arial" color="navy" size="1"><span lang="PT-BR" style="FONT-SIZE: 8pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p></div>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> Josué Conti [mailto:
<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:josueconti@gmail.com" target="_blank">josueconti@gmail.com</a>] <br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Saturday, December 10, 2005 4:59 PM
</span></font></p>
<div><span>
<p><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"><br><span><b><span style="FONT-WEIGHT: bold">To:</span></b> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:asteriskbrasil@listas.asteriskbrasil.org" target="_blank">
asteriskbrasil@listas.asteriskbrasil.org</a></span><br><span><b><span style="FONT-WEIGHT: bold">Subject:</span></b> Re: [AsteriskBrasil] regras do ip tables</span></span></font></p></span></div></div>
<div><span>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Oz, mas acesso a maquina, via ssh, como altero no putty depois?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Como</span></font> ficaria minha regra?</p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Agradeço a atenção<br><br> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Em 10/12/05, <b><span style="FONT-WEIGHT: bold">Ossi Sariola</span></b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:posti01@poboxes.com" target="_blank">
posti01@poboxes.com </a>> escreveu: </span></font></p>
<div>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Josué,</span></font></p>
<p><font face="Arial" color="navy" size="2"><span style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Se está conectado na internet, corre risco…</span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Sugiro mudar o SSH da porta 22 para algo acima de 50000....</span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p>
<p><font face="Arial" color="navy" size="2"><span lang="PT-BR" style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">oZ</span></font></p>
<div>
<p><font face="Arial" color="navy" size="1"><span lang="PT-BR" style="FONT-SIZE: 8pt; COLOR: navy; FONT-FAMILY: Arial"> </span></font></p></div>
<div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="2">
</span></font></div>
<p><b><font face="Tahoma" size="2"><span style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</span></font></b><font face="Tahoma" size="2"><span style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma"> Josué Conti [mailto:
<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:josueconti@gmail.com" target="_blank">josueconti@gmail.com</a>] <br><b><span style="FONT-WEIGHT: bold">Sent:</span></b> Saturday, December 10, 2005 4:33 PM
<br><b><span style="FONT-WEIGHT: bold">To:</span></b> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:asteriskbrasil@listas.asteriskbrasil.org" target="_blank">asteriskbrasil@listas.asteriskbrasil.org
</a><br><b><span style="FONT-WEIGHT: bold">Subject:</span></b> Re: [AsteriskBrasil] regras do ip tables</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Eder, mas como está hoje, não corro risco de ataques, né?</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Desde já obrigado</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Josué<br><br> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Em 10/12/05, <b><span style="FONT-WEIGHT: bold">eder souza</span></b> <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:ederwander@yahoo.com.br" target="_blank">
ederwander@yahoo.com.br</a>> escreveu: </span></font></p>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Josué, é o seguinte falta o range do RTP que vai de 10000 a 20000 se vc não liberar estas portas os clientes SIP que estão fora de sua rede local não conseguirão acesso ao seu asterisk, lembrando que vc pode diminuir o range, vc poderá faze-lo configurando o arquivo
RTP.conf edita os campos rtpstart=10000 e rtpend=20000 para um range menor exemplo</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">rtpstart=100 <br>rtpend=200<br> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">e libera no teu firewall </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">ex:</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">-A INPUT -d 200.xxx.xxx.xxx -i eth0 -p tcp -m multiport --dports 100:200 -j ACCEPT</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Abraços </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Eder</span></font> de souza.</p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br><b><i><span style="FONT-WEIGHT: bold; FONT-STYLE: italic">Josué Conti <<a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:josueconti@gmail.com" target="_blank">
josueconti@gmail.com</a>></span></i></b> escreveu:</span></font></p></div>
<blockquote style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: medium none; MARGIN-TOP: 5pt; PADDING-LEFT: 4pt; MARGIN-BOTTOM: 5pt; PADDING-BOTTOM: 0in; MARGIN-LEFT: 3.75pt; BORDER-LEFT: #1010ff 1.5pt solid; PADDING-TOP: 0in; BORDER-BOTTOM: medium none">
<div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Pessoal, bom dia.</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Criei as seguintes regras no ip tables, mas gostaria de saber de vocês, se necessita de mais alguma coisa, ou se esta bom desta maneira. </span></font>
</p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Desde já agradeço a atenção.</span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005<br>*mangle<br>:PREROUTING ACCEPT [10841147:2094051733]<br>:INPUT ACCEPT [10321713:2051635382]
<br>:FORWARD ACCEPT [0:0]<br>:OUTPUT ACCEPT [10120294:1997487730] <br>:POSTROUTING ACCEPT [10117524:1996938029]<br>COMMIT<br># Completed on Mon Nov 21 19:36:08 2005<br># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005
<br>*nat<br>:PREROUTING ACCEPT [315:33059]<br>:POSTROUTING ACCEPT [22:4848] <br>:OUTPUT ACCEPT [0:0]<br>COMMIT<br># Completed on Mon Nov 21 19:36:08 2005<br># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005
<br>*filter<br>:INPUT DROP [26:3695]<br>:FORWARD ACCEPT [0:0]<br>:OUTPUT ACCEPT [25925:5235989] <br>-A INPUT -i lo -j ACCEPT<br>-A INPUT -i eth1 -j ACCEPT<br>-A INPUT -d 200.xxx.xxx.xxx -i eth0 -p tcp -m multiport --dports 22,443,5060,4569 -j ACCEPT
<br>-A INPUT -d 200.xxx.xxx.xxx -i eth0 -p udp -m multiport --dports 5060,4569,123 -j ACCEPT <br>-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT<br>-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT<br>
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT<br>COMMIT<br> </span></font></p></div>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Onde o IP 200.xxx.xxx.xxx é o IP do Asterisk.</span></font></p></div></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">_______________________________________________<br>LIsta de discussões AsteriskBrasil.org<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:AsteriskBrasil@listas.asteriskbrasil.org" target="_blank">
AsteriskBrasil@listas.asteriskbrasil.org</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil
</a><br><br>_______________________________________________<br>Acesse o wiki AsteriskBrasil.org:<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.asteriskbrasil.org/" target="_blank">http://www.asteriskbrasil.org
</a></span></font></p></blockquote>
<div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br> </span></font></p></div>
<div style="TEXT-ALIGN: center" align="center"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">
<hr align="center" width="100%" size="1">
</span></font></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt">Yahoo! doce lar. <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://us.rd.yahoo.com/mail/br/tagline/homepage_set/*http:/br.yahoo.com/homepageset.html" target="_blank">
Faça do Yahoo! sua homepage.</a> </span></font></p>
<p style="MARGIN-BOTTOM: 12pt"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br>_______________________________________________<br>LIsta de discussões AsteriskBrasil.org<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:AsteriskBrasil@listas.asteriskbrasil.org" target="_blank">
AsteriskBrasil@listas.asteriskbrasil.org</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil
</a><br><br>_______________________________________________<br>Acesse o wiki AsteriskBrasil.org:<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.asteriskbrasil.org/" target="_blank">http://www.asteriskbrasil.org
</a></span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></div></div>
<p style="MARGIN-BOTTOM: 12pt"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br>_______________________________________________<br>LIsta de discussões AsteriskBrasil.org<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:AsteriskBrasil@listas.asteriskbrasil.org" target="_blank">
AsteriskBrasil@listas.asteriskbrasil.org</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil
</a><br><br>_______________________________________________<br>Acesse o wiki AsteriskBrasil.org:<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.asteriskbrasil.org/" target="_blank">http://www.asteriskbrasil.org
</a></span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></span></div></div>
<p style="MARGIN-BOTTOM: 12pt"><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"><br>_______________________________________________<br>LIsta de discussões AsteriskBrasil.org<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:AsteriskBrasil@listas.asteriskbrasil.org" target="_blank">
AsteriskBrasil@listas.asteriskbrasil.org</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil
</a><br><br>_______________________________________________<br>Acesse o wiki AsteriskBrasil.org:<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.asteriskbrasil.org/" target="_blank">http://www.asteriskbrasil.org
</a></span></font></p></div>
<p><font face="Times New Roman" size="3"><span style="FONT-SIZE: 12pt"> </span></font></p></span></div></div><br>_______________________________________________<br>LIsta de discussões AsteriskBrasil.org<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:AsteriskBrasil@listas.asteriskbrasil.org">
AsteriskBrasil@listas.asteriskbrasil.org</a><br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil" target="_blank">http://listas.asteriskbrasil.org/mailman/listinfo/asteriskbrasil
</a><br><br>_______________________________________________<br>Acesse o wiki AsteriskBrasil.org:<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://www.asteriskbrasil.org/" target="_blank">http://www.asteriskbrasil.org
</a><br><br></blockquote></div><br>