Transcription

ENABLESECURITYHow to set up a VoIP lab(on a shoestring)By:Sandro Gauci ([email protected])Date: 21 March 2009Last updated: 24 March 2009

ENABLESECURITYIntroductionHave you been wondering about what sort of security vulnerabilities apply to the VoIPnetwork that’s coming up in your next assignment but have no equipment to test on yet?Truth is that most of the times there is no need for a lot of expensive hardware to setup abasic lab for testing VoIP security. Of course some of the more interesting security threatsapply to expensive proprietary hardware, but most of the times you can get away withmaking use of virtual machines and freely available software. In this tutorial I will be givingstep-by-step instructions on how to setup a VoIP lab that can be used for testing securitytools such as VOIPPACK.Basic Requirements VMware Server (may also use other VM options) AsteriskNOW 1.0.2.1 http://www.asterisknow.org/downloads X-Lite er following this tutorial you will be able to: Install and setup a PBX on a VM Manager user accounts on the PBX Route calls through a 3rd party VoIP provider Make calls to landline numbers through the IP PBX

ENABLESECURITYInstalling AsteriskNOW on a VMPreparationWe made use of the following default settings during creation of a new Virtual Machine inVMware server: Operating System: Linux, Version: Other 2.6x Linux (32-bit) Memory: 512 MB Virtual Hard Disk: created a new one of 8gb Network Adapter 1: Bridged CD/DVD Drive: Use an ISO image and selected the ISO image file downloaded fromthe AsteriskNOW download pageThat’s it, we’re ready to start the installation. Here’s a screenshot of how the virtualmachine configuration looks like after following the above instructions:

ENABLESECURITYInstallationThe installation of AsteriskNOW is quite straightforward and even includes a GUI as youcan see in the screenshot.Steps during installation:1.Installation Type: Express Installation2.Automatic Partitioning: Remove all Linux partitions on this system3.Network configuration: DHCP (default)4.Administrator Password: remember this passwordIt will take a few minutes to install, so grab a coffee or your favorite drink. Once installedyou will be asked to reboot.

ENABLESECURITYInitial setupAfter reboot the screen will show the IP address of the new AsteriskNOW box.Browse to this address (192.168.1.122 in our case) by making use of your web browserand login using the user credentials that you set before. The username is “admin” andpassword is what you chose during installation. Once logged in, click on the “Users”button in the left side bar so that we create a new user extension. We set the followingoptions and left the rest as set by default: Name: Joe Doe Password: 6000Then click on the “Save” button at the bottom of the page and “Activate Changes” at thetop.

ENABLESECURITYSetting up your IP PhoneIt is time to try out our new extension. Install X-Lite if you did not do so yet, and configureit by right clicking on the application (X-Lite) and selecting “SIP Account Settings”. Thenclick on the “add” button and set the following options in the “Account” tab: Display Name: Joe Doe (does not really matter) User name: 6000 Password: 6000 Authorization user name: 6000 Domain: 192.168.1.122 (the IP address of the PBX)X-lite should show up as “Ready, your name is 6000”. Make sure that the extension worksby calling 7000 which by default is the “Voice Menu” system. You should hear anautomated voice asking you to dial an extension.Further configurationPBX configurationAccountsSet up a few more accounts: Without a password

ENABLESECURITY With a pattern password such as 1212 With a dictionary wordSetting up toll free calling1.Select the user that you created before and select a dialplan “DialPlan1”. Rememberto save and activate the changes2.From the AsteriskNOW configuration click on the “Service Providers” and then “AddService Provider”.3.Select “Custom VoIP” and the fill in the following fields:1.Comment: anything2.Protocol: SIP3.Host: sip.tollfreegateway.com4.Username: anything5.Activate changes

ENABLESECURITY4.Finally create a call rule by clicking on the call rules button on the left bar and “add acalling rule” button. Use the following details:1.Rule name: free calls2.Place this call through: choose the provider that we just added3.If the number begins with: 18004.Followed by 3 digits5.Select the “or more” option5.Activate the changes6.From X-Lite call the listing directory on 18005551212 - you should hear anautomated voice.

ENABLESECURITYAdditional options to considerYou may choose to install more PBX servers for your lab. Here’s a short list of available(some might be free others trial) and easy to setup PBX servers and softphones.Other Asterisk-based PBX distributions Trixbox (http://www.trixbox.org/) PBX in a Flash (http://pbxinaflash.net/) Elastix (http://www.elastix.org/)Other PBX servers available for download 3CX (http://www.3cx.com) pbxnsip Brekeke (http://www.brekeke.com/) CommunigateOther Software IP Phones SJPhone Zoiper (supports IAX2) Ekiga Gizmo5 (Skype competitor that makes use of SIP)ConclusionHope that you enjoyed this tutorial and that at least it motivated you enough to considersetting up a VoIP lab. If you have any feedback or additional content please email [email protected] EnableSecurity:EnableSecurity is dedicated to providing high quality Information Security Consultancy,Research and Development. EnableSecurity develops security tools such as VOIPPACK(for Immunity CANVAS) and SIPVicious. EnableSecurity is focused on analysis of securitychallenges and providing solutions to such threats. EnableSecurity works on developingcustom targeted security solutions, as well as working with existing off the shelf securitytools to provide the best results for their customers. More info at enablesecurity.com

It is time to try out our new extension. Install X-Lite if you did not do so yet, and configure it by right clicking on the application (X-Lite) and selecting “SIP Account Settings”. Then click on the “add” button and set the following options in the “Account” tab: Display