{"id":4205,"date":"2024-11-03T14:48:57","date_gmt":"2024-11-03T19:48:57","guid":{"rendered":"https:\/\/dialer.one\/?p=4205"},"modified":"2025-02-10T13:44:30","modified_gmt":"2025-02-10T18:44:30","slug":"how-to-use-the-full-functionality-of-the-vicidial-installer-by-carpenox","status":"publish","type":"post","link":"https:\/\/dialer.one\/index.php\/how-to-use-the-full-functionality-of-the-vicidial-installer-by-carpenox\/","title":{"rendered":"How to – Use the full functionality of the ViciDial installer by carpenox"},"content":{"rendered":"\n

How to – Use the full functionality of the ViciDial installer by carpenox<\/h1>\n\n\n\n

Vicidial administrators, take note: the Carpenox Auto Installer is about to change the game. This tool transforms the usually complex setup of Vicidial into a smooth, hassle-free experience. Let me go over some post installation steps and key things to take note of and changes I suggest you make after the fact of using the installer. I will give you a few steps to do first:<\/p>\n\n\n\n

This assumes you have installed already through this article: How to \u2013 Install Vicidial on Alma Linux 9 with my new auto installer<\/a><\/p>\n\n\n\n

\n\"\"<\/a><\/center>\n\n\n\n

Step 1 – Login to the admin GUI and change the default password<\/h2>\n\n\n\n

After you reboot the server, which should only be done once you have attached the FQDN(Fully Qualified Domain Name) for the SSL cert in the very last step of the installation process. This step is important and I advise you don’t skip it if you plan to use webphones that are built into the installer. If you do skip this step, make sure you turn the firewall off before trying to run it post the initial install or certbot wont be able to get through to create the SSL. The command is “service firewalld stop” and then start it back again after you install the SSL. This being said, then login to that domain in your browser. For example: https:\/\/my.dialer.one (Use your domain this is NOT real)
The default login is 6666 and password 1234 – make sure you change this password and then go into users and give yourself all the permissions possible.<\/p>\n\n\n\n

If you do decide to not use webphones and can not or will not be installing SSL, you will need to login still through the https port with https:\/\/192.168.1.1 (your IP) and change the password the same. You will need need to add the http port to your trusted zone as well as the dynamic portal non SSL port to public which is 81. You can do so with the following commands:<\/p>\n\n\n\n

firewall-cmd --permanent --add-port=81\/tcp\nfirewall-cmd --add-service=http --zone=trusted --permanent\nfirewall-cmd --reload<\/code><\/pre>\n\n\n\n
Step 2 – Lock the firewall down<\/h2>\n\n\n\n
Hackers these days are quick, like I mean I have had servers provisioned from well known hosting companies like Hetzner, Vultr, DigitalOcean, OVH Cloud, IONOS, Contabo and many others within 15 minutes. They scan these known IP ranges and go for known vulnerabilities very quick and will install rootkits, crypto miners, DDOS bots and other malware. The firewall rules I have set in place leave the needed ports to be open to use the dialer in the “trusted” zone, however I have left port 443(https) open to public zone so you can login and change the default password, because you can not use the dynamic portal to validate your IP until after the default password has been changed. <\/p>\n\n\n\n
So, now that you’ve changed that password, lets remove the https port 443 from the public zone. To do so type the following commands: You can also see more use for the firewall here: How to \u2013 Use Firewalld via command line<\/a><\/p>\n\n\n\n
firewall-cmd --permanent --remove-service=https\nfirewall-cmd --reload\n\nYou also need to update the dynamic portal redirect link with this command:\n\nnano \/var\/www\/vhosts\/dynportal\/inc\/defaults.inc.php\n<\/code><\/pre>\n\n\n\n
Change the https:\/\/cyburdial.com\/agc\/cyburdial.php to https:\/\/yourdomain.com\/agc\/vicidial.php<\/p>\n\n\n
\n
\"Dynamic<\/figure>\n<\/div>\n\n\n
You should not be able to get to your domain at this point, you will need to use the dynamic portal login to validate your IP. You can find the URL for this at https:\/\/my.dialer.one:446\/valid8.php (Again, use your domain) or for those of you that are only using IP – http:\/\/192.168.1.1:81\/valid8.php. When you go to that page you will see a login area that looks like the image below:<\/p>\n\n\n
\n
\"Dynamic<\/figure>\n<\/div>\n\n\n
If you have followed the previous steps you should now be redirected to the ViciDial agent page to login with your username and password. Just browse to the admin area by removing the \/agc\/vicidial.php part. Some more advanced steps would be to change the Dynamic portal port off of 446 to something above the 50000 range as it takes more time for hackers to scan this high and they typically will not waste the time. Changing the name of the valid8.php file is also a good standard operating procedure to put in place, however this take some other changes in the template file as well, that I will not go over on this article. If you would like to see an article for that, post a comment below.<\/p>\n\n\n\n
\n\"Contabo<\/a><\/center>\n\n\n\n
Step 3 – Setup your ViciDial instance<\/h2>\n\n\n\n
At this point, most of you should know how to setup your your Vicidial configurations and setup. If not make sure to check out a few of my friends YouTube pages with lots of content regarding this:<\/p>\n\n\n\n