Zycoo CooVox T Series, Руководство администратора и пользователя

Страница: 136 / 147

- 130 - ZYCOO CooVox T-series IP Phone System Admin User Guide v4.0.0
Security Center
CooVox IPPBX system has been preconfigured with a built-in firewall which prevents your IP phone system from
unauthorized access, malicious users and some other attackers.
You may not need to specifically configure the firewall settings but for security precautions please always keep it
on.
Firewall
Path: System -> Security -> Firewall
CooVox series IPPBX system uses Fail2Ban to perform intrusion detection and uses iptables to block any attack
attempts.
l
First of all make sure the Firewall option is enabled. Only consider disabling your firewall if your CooVox
IPPBX is behind a router/firewall without any port forwarding from the Internet.
l
Drop Ping will cause the system to ignore ping request. If enabled, you cannot ping the IPPBX system.
l
Drop All will cause all packets sent to the IPPBX system being dropped, this will cause CooVox IPPBX system
to block all communication with the outside world. Except web UI still works in local network, other services
will all be terminated.
l
Geo IP is a security policy which can be used to grant access of IP addresses from certain countries/regions,
all IP addresses from other countries/regions which are not specified will all be blocked. By default, web UI
will still be accessible. Enabling
Geo IP requires Drop All to be enabled too.
To implement Geo IP please follow the steps below.
Step 1 : Enable Geo IP and Drop All