[App_rpt-users] Stepping on toes...

Steve Zingman szingman at msgstor.com
Mon Jul 11 14:29:16 EDT 2016


How would apt-pinning effect the issues. Other then people updating 
their kernel without thought to the fact that the kernel headers are 
needed to re-compile. Debian 8 is current and security updates happen 
all the time.

On 7/11/2016 2:18 PM, Loren Tedford wrote:
> Steve any idea how far we have gotten?? The security threat list is 
> pretty large at the moment..
> https://www.cvedetails.com/vulnerability-list/vendor_id-6284/Asterisk.html
>
> And honestly the above is probably for more current versions which 
> mean their are probably more threats out their than we really want to 
> think about..
>
> All i know is we can't keep running on this version for ever well i 
> don't think we can.. I guess we may get to the point of apt pinning..
>
> While i am being honest here.. We should probably one day update the 
> mailing list to more of a forum thread some where with actual details 
> etc.. Mailing list seems to be abit old school just my thoughts..
>
> Loren Tedford (KC9ZHV)
> Phone:
> Fax:
> Email: lorentedford at gmail.com <mailto:lorentedford at gmail.com>
> Email: KC9ZHV at KC9ZHV.com <mailto:KC9ZHV at KC9ZHV.com>
> http://www.lorentedford.com <http://www.lorentedford.com/>
> http://www.kc9zhv.com <http://www.kc9zhv.com/>
> http://forum.kc9zhv.com <http://forum.kc9zhv.com/>
> http://hub.kc9zhv.com <http://hub.kc9zhv.com/>
> http://Ltcraft.net<http://ltcraft.net/>
>
> On Mon, Jul 11, 2016 at 1:12 PM, Steve Zingman <szingman at msgstor.com 
> <mailto:szingman at msgstor.com>> wrote:
>
>     Time, Energy, drive, people. Just to name a few.
>
>
>     On 7/11/2016 2:08 PM, Loren Tedford wrote:
>>     Ok so what are missing to get the development started on a more
>>     current version of asterisk?? Lets face it 1.4.23 went out of
>>     professional service back in like 2010...
>>
>>     Just saying we really need to start thinking more about the
>>     future now rather than waiting till we have mass issues across
>>     the board..
>>
>>     Loren Tedford (KC9ZHV)
>>     Phone:
>>     Fax:
>>     Email: lorentedford at gmail.com <mailto:lorentedford at gmail.com>
>>     Email: KC9ZHV at KC9ZHV.com <mailto:KC9ZHV at KC9ZHV.com>
>>     http://www.lorentedford.com
>>     http://www.kc9zhv.com
>>     http://forum.kc9zhv.com
>>     http://hub.kc9zhv.com
>>     http://Ltcraft.net<http://ltcraft.net/>
>>
>>     On Mon, Jul 11, 2016 at 1:05 PM, Steve Zingman
>>     <szingman at msgstor.com <mailto:szingman at msgstor.com>> wrote:
>>
>>         It's going to taker a LOT of work to change versions of
>>         Asterisk. That's not to say it will not happen.
>>         I can't re-create you crashes.
>>         I firewall my boxes to only allow access from trusted
>>         addresses for ssh. I use a VPN for roaming users. I don't
>>         support SIP.
>>
>>
>>         On 7/11/2016 2:02 PM, Loren Tedford wrote:
>>>
>>>         I suppose while we are stepping on toes I want to ask about
>>>         the proper way of securing a dial box from our wonderful
>>>         hackers out their.. Been using ufw and fail2ban but found
>>>         out recently nothing is invincible.. any thoughts?? By the
>>>         way any progress on asterisk crashes?? I can't find a reason
>>>         for the crashes in the logs..
>>>
>>>         Also what is the status on updating asterisk to a more
>>>         current version?? Any issues with that??
>>>
>>>         Loren Tedford (KC9ZHV)
>>>         Email: lorentedford at gmail.com <mailto:lorentedford at gmail.com>
>>>         Phone:
>>>         Fax:
>>>         http://www.lorentedford.com
>>>         http://kc9zhv.com
>>>
>>>         Sent from Droid Turbo from Verizon wireless network
>>>
>>>         On Jul 11, 2016 12:34 PM, "Steve Zingman"
>>>         <szingman at msgstor.com <mailto:szingman at msgstor.com>> wrote:
>>>
>>>             Yes,
>>>             I've seen it before. Ramesh asked the question here and
>>>             a couple of us had some questions as to his
>>>             configuration. I think he is in process of gathering
>>>             info so we can trouble shoot more.
>>>             I't not hard to get lists confused.
>>>
>>>             Steve
>>>
>>>             On 7/11/2016 1:30 PM, DuaneVT . wrote:
>>>>             Thanks Steve. You have helped me several times here I
>>>>             believe. Perhaps it was the ARM Allstar list I should
>>>>             have ranted to. As some posts get shared between lists,
>>>>             it is hard not to end up on another list.
>>>>             Here is an example. I felt for the questioner...
>>>>             "Message: 3
>>>>             Date: Sun, 10 Jul 2016 09:53:39 -0400
>>>>             From: Doug Crompton <doug at crompton.com
>>>>             <mailto:doug at crompton.com>>
>>>>             To: ARM Allstar <arm-allstar at hamvoip.org
>>>>             <mailto:arm-allstar at hamvoip.org>>
>>>>             Subject: Re: [arm-allstar] Using "A" and "B" audio
>>>>             outputs using the
>>>>                   DIAL Image on a RPi
>>>>             Message-ID: <BLU171-W25439CF444D3509E8F7BE5BA3E0 at phx.gbl>
>>>>             Content-Type: text/plain; charset="iso-8859-1"
>>>>
>>>>             Ramesh,
>>>>
>>>>              This is NOT a dial list, ask elsewhere! It works fine
>>>>             on the hamvoip.org <http://hamvoip.org/> code.
>>>>             73 Doug
>>>>             WA3DSP
>>>>             http://www.crompton.com/hamradio
>>>>
>>>>
>>>>             > To: arm-allstar at hamvoip.org
>>>>             <mailto:arm-allstar at hamvoip.org>
>>>>             > Date: Sun, 10 Jul 2016 07:34:57 -0400
>>>>             > Subject: [arm-allstar] Using "A" and "B" audio outputs
>>>>             using the DIAL Image   on a RPi
>>>>             > From: arm-allstar at hamvoip.org
>>>>             <mailto:arm-allstar at hamvoip.org>
>>>>             > CC: Ramesh at va3uv.com <mailto:Ramesh at va3uv.com>
>>>>             >
>>>>             > Hi All:
>>>>             >
>>>>             > I am using the DIAL Image on a PRi 2; I would like to
>>>>             use the "A" and
>>>>             > "B" audio outputs from my fob (A for voice and B for
>>>>             PL), so that I can
>>>>             > inject them into separate points on my exciter.
>>>>             >
>>>>             > I was able to get 2 'discrete' audio outputs when
>>>>             running ACID on a PC.
>>>>             > This doesn't seem to be working with the Pi / DIAL. 
>>>>             Is anyone running
>>>>             > this configuration on a Pi?
>>>>             >
>>>>             > Thx,
>>>>             >
>>>>             > Ramesh.
>>>>             >
>>>>             > # 27919 and a truck load of others!
>>>>             ​"
>>>>
>>>>             Sheesh, I want to help everyone....
>>>>             Thanks again until my next question HERE,
>>>>             Duane ​
>>>>
>>>>             On Mon, Jul 11, 2016 at 1:06 PM, Steve Zingman
>>>>             <szingman at msgstor.com <mailto:szingman at msgstor.com>> wrote:
>>>>
>>>>                 Duane,
>>>>                 When were you told on the App_rpt-users list to go
>>>>                 elsewhere with DIAL questions? DIAL is the official
>>>>                 distribution for AllStar. Support questions SHOULD
>>>>                 be posted here. I know that other lists limit their
>>>>                 support to THEIR distribution and have curtly told
>>>>                 DIAL users to go elsewhere for support. I do not
>>>>                 remember seeing your question on here. If I missed
>>>>                 it, I'm sorry. I TRY to help out with DIAL and
>>>>                 general Asterisk questions when possible.
>>>>
>>>>                 73, Steve N4IRS
>>>>                 INAD
>>>>
>>>>                 On 7/11/2016 12:42 PM, DuaneVT . wrote:
>>>>>                 I too have asked questions here concerning DIAL
>>>>>                 and been told curtly to go elsewhere. As DIAL
>>>>>                 distros have all the files included and interface
>>>>>                 to the FOBs and SBCs, where do we draw the line? I
>>>>>                 have followed all instructions for installing the
>>>>>                 software and had fresh boot problems. It was hard
>>>>>                 to tell where the problem was, but when I am new
>>>>>                 to Linux/DIAL and the whole Allstar project, I
>>>>>                 looked for guidance where I found discussions.
>>>>>                 There is an Allstar Link community on Google+, and
>>>>>                 you will see I have all except 1 postings!
>>>>>                 Crickets.........
>>>>>                 Perhaps the moderator/users here could post a list
>>>>>                 of URLs for different aspects of AllStar Link so
>>>>>                 us Newbies would know where to hang out.
>>>>>                 I have had GREAT support from other listers here
>>>>>                 by direct email after each post and I sincerely
>>>>>                 thank all who have taken an interest in someone
>>>>>                 who has to learn as we all do.
>>>>>                 73,
>>>>>                 Duane  KA1LM  #42996
>>>>>
>>>>>
>>>>>                 _______________________________________________
>>>>>                 App_rpt-users mailing list
>>>>>                 App_rpt-users at ohnosec.org
>>>>>                 <mailto:App_rpt-users at ohnosec.org>
>>>>>                 http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>>>
>>>>>                 To unsubscribe from this list please visithttp://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users  and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button"
>>>>>                 You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.
>>>>
>>>>                 -- 
>>>>                 "Anything is possible if you don't know what you are talking about."
>>>>                 1st Law of Logic
>>>>
>>>>
>>>
>>>             -- 
>>>             "Anything is possible if you don't know what you are talking about."
>>>             1st Law of Logic
>>>
>>>
>>>             _______________________________________________
>>>             App_rpt-users mailing list
>>>             App_rpt-users at ohnosec.org <mailto:App_rpt-users at ohnosec.org>
>>>             http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
>>>
>>>             To unsubscribe from this list please visit
>>>             http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and
>>>             scroll down to the bottom of the page. Enter your email
>>>             address and press the "Unsubscribe or edit options button"
>>>             You do not need a password to unsubscribe, you can do it
>>>             via email confirmation. If you have trouble
>>>             unsubscribing, please send a message to the list
>>>             detailing the problem.
>>>
>>
>>         -- 
>>         "Anything is possible if you don't know what you are talking about."
>>         1st Law of Logic
>>
>>
>
>     -- 
>     "Anything is possible if you don't know what you are talking about."
>     1st Law of Logic
>
>

-- 
"Anything is possible if you don't know what you are talking about."
1st Law of Logic

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.allstarlink.org/pipermail/app_rpt-users/attachments/20160711/5c0ad6e0/attachment.html>


More information about the App_rpt-users mailing list