{"id":1977,"date":"2021-04-10T15:31:08","date_gmt":"2021-04-10T19:31:08","guid":{"rendered":"https:\/\/cyburityllc.com\/?p=1977"},"modified":"2023-08-30T19:00:47","modified_gmt":"2023-08-30T23:00:47","slug":"how-to-secure-vicidial-correctly-part-1","status":"publish","type":"post","link":"https:\/\/dialer.one\/index.php\/how-to-secure-vicidial-correctly-part-1\/","title":{"rendered":"How to – Secure Vicidial, correctly. Part 1"},"content":{"rendered":"\n

How to – Secure Vicidial, correctly. Part 1<\/h2>\n\n\n\n

This article will show you how to secure Vicidial server correctly. This is definitely one of the topics, that I am asked about the most, so with that being said, this will be a multipart series with different “layers” of security from the basic way you need to secure your system in todays remote world, and as advanced as encrypted passwords, recordings, two factor authentication and more.<\/p>\n\n\n

\n
\"secure
Securing Vicidial<\/figcaption><\/figure>\n<\/div>\n\n\n

The steps I will cover in this article, will be the steps to take once you have finished installing a fresh Vicidial server. It will cover a single server setup, not a cluster which requires some additional steps to be shown later on in this series. This article will also presume you are setting this up for remote access, not just local. Let’s get started.<\/p>\n\n\n\n

\n\n\n\n

Secure Vicidial<\/span><\/strong><\/h2>\n\n\n\n

Step 1 – Setup access through YAST firewall.<\/h3>\n\n\n\n

At the Linux CLI, type “yast firewall” and the following screen will pop up:<\/p>\n\n\n

\n
\"secure<\/figure>\n<\/div>\n\n\n

Go down to “Interfaces” and select your NIC card that has WAN access and change the zone from default to public:<\/p>\n\n\n

\n
\"\"
Change default zone to public<\/figcaption><\/figure>\n<\/div>\n\n\n

Then TAB over to the public zone and remove all entries but apache2-ssl and ssh, then add viciportal-ssl.<\/p>\n\n\n

\n
\"\"
Public Zone services to allow<\/figcaption><\/figure>\n<\/div>\n\n\n

Finally, add these services to your “Trusted” zone and TAB over to [Accept] and press enter.<\/p>\n\n\n

\n
\"\"
Trusted Zone services to allow<\/figcaption><\/figure>\n<\/div>\n\n\n

This completes the first step for securing your Vicidial server’s firewall access.<\/p>\n\n\n\n

\n\n\n\n

Step 2 – Granting access for Dynamic portal & IP whitelist access only through the VB-firewall crontab entry<\/h3>\n\n\n\n

The next thing you need to do is change the crontab entry from blacklist being blocked to whitelist and dynamic access only. To do so, type “crontab -e” at your Linux CLI and you should see the following:<\/p>\n\n\n

\n
\"\"
crontab -e<\/figcaption><\/figure>\n<\/div>\n\n\n

“Page down” until you see the VB-firewall entries near the bottom and change them as you see below:<\/p>\n\n\n

\n
\"\"
Make the changes you see above and press cntl+X to save and follow the prompts to save it.<\/figcaption><\/figure>\n<\/div>\n\n\n

Ok, so these steps above will prepare your server for the next steps of this process which I have written in other articles already, but I will link them here for easy navigation.<\/p>\n\n\n\n

\n\n\n\n

Step 3 – Enabling IP Whitelist<\/h3>\n\n\n\n

You can follow my blog post about IP whitelist, here<\/a>.<\/p>\n\n\n

\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n
\n\n\n\n

Step 4 – Setting up the dynamic portal<\/h3>\n\n\n\n

You can follow the article for these instructions, here<\/a>.<\/p>\n\n\n

\n
\"Dynportal\"<\/a>
Dynportal<\/figcaption><\/figure>\n<\/div>\n\n\n
\n\n\n\n

Well, that’s it for part 1, you have now setup your system for secure remote access to your server through IP whitelist & dynamic portal only. As always, feel free to comment below with any questions or issues you have along the way. My team and I are always available to help our Vicidial community secure themselves against the threats todays world comes with such as BazarCall<\/a> malware, Ryuk and Conti Ransomwares and other cyber threats that directly target the telecommunications industry. Please protect yourself accordingly, if you need help with this, please fill out the form below for a FREE security audit<\/a> or if you need some technical assistance on your servers.<\/p>\n\n\n\n

\n\n\n\n\n\t\t\t\t\t\t