CLueCon default pass

V

Vahram

Member
Oct 2, 2017
38
0
6
58
Hi

For security reason i have to change default socket password ClueCon in FussionPBX . Can some one help ?
FussionPBX version 5.3
 
You can change the password if you want by changing this file and the restart FreeSWITCH
/etc/freeswitch/autoload_configs/event_socket.conf.xml
Click to expand...


Event socket is only available to localhost or 127.0.0.1 by default. This is a critical default for security. My recommendation to people is to never change the listen-ip as this feature should remain on 127.0.0.1. Any communication to the event socket is safer with a middleman that talks to the event socket's 127.0.0.1.

The reason it should not be exposed to any other IP address other than 127.0.0.1 is that event socket has...
  • No encryption
  • No permissions to control access for specific commands
 
You must log in or register to reply here.
Top Bottom