{"id":965,"date":"2024-12-23T13:55:02","date_gmt":"2024-12-23T06:55:02","guid":{"rendered":"https:\/\/omtel.ltd\/?p=965"},"modified":"2024-12-24T00:35:30","modified_gmt":"2024-12-23T17:35:30","slug":"install-freepbx-17-on-debian-12-with-asterisk-21","status":"publish","type":"post","link":"https:\/\/omtel.ltd\/index.php\/2024\/12\/23\/install-freepbx-17-on-debian-12-with-asterisk-21\/","title":{"rendered":"Install FreePBX 17 on Debian 12 with Asterisk 21"},"content":{"rendered":"

Install FreePBX 17 on Debian 12 with Asterisk 21<\/strong>
\nRef : https:\/\/sangomakb.atlassian.net\/wiki\/spaces\/FP\/pages\/10682545\/How+to+Install+FreePBX+17+on+Debian+12+with+Asterisk+21<\/a><\/p>\n

\u0e42\u0e1b\u0e23\u0e41\u0e01\u0e23\u0e21\u0e17\u0e35\u0e48\u0e40\u0e01\u0e35\u0e48\u0e22\u0e27\u0e02\u0e49\u0e2d\u0e07<\/strong><\/p>\n

1.FreePBX17
\n2.Asterisk21
\n3.PHP 8.2
\n4.Maria DB (v10.11)
\n5.Node JS (v18.16)
\n6.64-bit Intel\/AMD (x86_64) platform
\n7.Linux Debian12 6.1.112-1 (2024-09-30)<\/p>\n

1.Prerequisite recommended OS update<\/strong>
\nroot@fs:\/home\/tee# apt-get update
\nroot@fs:\/home\/tee# apt-get upgrade
\nroot@fs:\/home\/tee# apt -y install build-essential git curl wget libnewt-dev libssl-dev libncurses5-dev subversion libsqlite3-dev libjansson-dev libxml2-dev uuid-dev default-libmysqlclient-dev htop sngrep lame ffmpeg mpg123
\nroot@fs:\/home\/tee# apt-get install -y locales
\nroot@fs:\/home\/tee# sed -i ‘s\/^# *\\(en_US.UTF-8\\)\/\\1\/’ \/etc\/locale.gen
\nroot@fs:\/home\/tee# locale-gen
\nGenerating locales (this might take a while)…
\nen_US.UTF-8… done
\nGeneration complete.
\nroot@fs:\/home\/tee# echo “export LC_ALL=en_US.UTF-8” >> ~\/.bashrc
\nroot@fs:\/home\/tee# echo “export LANG=en_US.UTF-8” >> ~\/.bashrc
\nroot@fs:\/home\/tee# echo “export LANGUAGE=en_US.UTF-8” >> ~\/.bashrc
\nroot@fs:\/home\/tee# locale -a
\nbash: warning: setlocale: LC_ALL: cannot change locale (en_US.UTF-8): No such file or directory
\nroot@fs:\/home\/tee# nano \/etc\/default\/locale
\nLANG=C.UTF-8
\nLC_CTYPE=en_US.UTF-8
\nLC_ALL=en_US.UTF-8
\nroot@fs:\/home\/tee# locale -a<\/p>\n

root@fs:\/home\/tee# apt -y install git vim curl wget libnewt-dev libssl-dev libncurses5-dev subversion libsqlite3-dev build-essential libjansson-dev libxml2-dev uuid-dev expect<\/p>\n

2.PHP 8.2 Installation<\/strong>
\nroot@fs:\/home\/tee# apt-get install -y build-essential linux-headers-`uname -r` openssh-server apache2 mariadb-server mariadb-client bison flex php8.2 php8.2-curl php8.2-cli php8.2-common php8.2-mysql php8.2-gd php8.2-mbstring php8.2-intl php8.2-xml php-pear curl sox libncurses5-dev libssl-dev mpg123 libxml2-dev libnewt-dev sqlite3 libsqlite3-dev pkg-config automake libtool autoconf git unixodbc-dev uuid uuid-dev libasound2-dev libogg-dev libvorbis-dev libicu-dev libcurl4-openssl-dev odbc-mariadb libical-dev libneon27-dev libsrtp2-dev libspandsp-dev sudo subversion libtool-bin python-dev-is-python3 unixodbc vim wget libjansson-dev software-properties-common nodejs npm ipset iptables fail2ban php-soap<\/p>\n

root@fs:\/home\/tee# php -v
\nPHP 8.2.26 (cli) (built: Nov 25 2024 17:21:51) (NTS)
\nCopyright (c) The PHP Group
\nZend Engine v4.2.26, Copyright (c) Zend Technologies
\nwith Zend OPcache v8.2.26, Copyright (c), by Zend Technologies<\/p>\n

3.Asterisk Installation<\/strong>
\nroot@fs:\/home\/tee# cd \/usr\/src
\nroot@fs:\/usr\/src# wget http:\/\/downloads.asterisk.org\/pub\/telephony\/asterisk\/asterisk-21-current.tar.gz
\nroot@fs:\/usr\/src# tar xvf asterisk-21-current.tar.gz
\nroot@fs:\/usr\/src# cd asterisk-21*\/
\nroot@fs:\/usr\/src\/asterisk-21.6.0#
\nroot@fs:\/usr\/src\/asterisk-21.6.0# contrib\/scripts\/get_mp3_source.sh
\nA addons\/mp3
\nA addons\/mp3\/layer3.c
\nA addons\/mp3\/interface.c
\nA addons\/mp3\/MPGLIB_TODO
\nA addons\/mp3\/mpg123.h
\nA addons\/mp3\/mpglib.h
\nA addons\/mp3\/decode_ntom.c
\nA addons\/mp3\/MPGLIB_README
\nA addons\/mp3\/common.c
\nA addons\/mp3\/huffman.h
\nA addons\/mp3\/tabinit.c
\nA addons\/mp3\/Makefile
\nA addons\/mp3\/README
\nA addons\/mp3\/decode_i386.c
\nA addons\/mp3\/dct64_i386.c
\nExported revision 204.<\/p>\n

root@fs:\/usr\/src\/asterisk-21.6.0# contrib\/scripts\/install_prereq install
\nroot@fs:\/usr\/src\/asterisk-21.6.0# .\/configure –libdir=\/usr\/lib64 –with-pjproject-bundled –with-jansson-bundled<\/p>\n

root@fs:\/usr\/src\/asterisk-21.6.0# make menuselect
\nroot@fs:\/usr\/src\/asterisk-21.6.0# make
\nroot@fs:\/usr\/src\/asterisk-21.6.0# make install
\nroot@fs:\/usr\/src\/asterisk-21.6.0# make samples
\nroot@fs:\/usr\/src\/asterisk-21.6.0# make config
\nroot@fs:\/usr\/src\/asterisk-21.6.0# ldconfig<\/p>\n

Create asterisk user and give permission<\/p>\n

root@fs:\/usr\/src\/asterisk-21.6.0# groupadd asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# useradd -r -d \/var\/lib\/asterisk -g asterisk asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# usermod -aG audio,dialout asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# chown -R asterisk:asterisk \/etc\/asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# chown -R asterisk:asterisk \/var\/{lib,log,spool}\/asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# chown -R asterisk:asterisk \/usr\/lib64\/asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s|#AST_USER|AST_USER|’ \/etc\/default\/asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s|#AST_GROUP|AST_GROUP|’ \/etc\/default\/asterisk
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s|;runuser|runuser|’ \/etc\/asterisk\/asterisk.conf
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s|;rungroup|rungroup|’ \/etc\/asterisk\/asterisk.conf
\nroot@fs:\/usr\/src\/asterisk-21.6.0# echo “\/usr\/lib64” >> \/etc\/ld.so.conf.d\/x86_64-linux-gnu.conf
\nroot@fs:\/usr\/src\/asterisk-21.6.0# ldconfig<\/p>\n

4.Configure Apache web server<\/strong><\/p>\n

root@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s\/\\(^upload_max_filesize = \\).*\/\\120M\/’ \/etc\/php\/8.2\/apache2\/php.ini
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s\/\\(^memory_limit = \\).*\/\\1256M\/’ \/etc\/php\/8.2\/apache2\/php.ini
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s\/^\\(User\\|Group\\).*\/\\1 asterisk\/’ \/etc\/apache2\/apache2.conf
\nroot@fs:\/usr\/src\/asterisk-21.6.0# sed -i ‘s\/AllowOverride None\/AllowOverride All\/’ \/etc\/apache2\/apache2.conf
\nroot@fs:\/usr\/src\/asterisk-21.6.0# a2enmod rewrite
\nEnabling module rewrite.
\nTo activate the new configuration, you need to run:
\nsystemctl restart apache2
\nroot@fs:\/usr\/src\/asterisk-21.6.0# systemctl restart apache2
\nroot@fs:\/usr\/src\/asterisk-21.6.0# rm \/var\/www\/html\/index.html<\/p>\n

5.Configure ODBC<\/strong>
\nroot@fs:\/usr\/src\/asterisk-21.6.0# cat < \/etc\/odbcinst.ini
\n[MySQL]
\nDescription = ODBC for MySQL (MariaDB)
\nDriver = \/usr\/lib\/x86_64-linux-gnu\/odbc\/libmaodbc.so
\nFileUsage = 1
\nEOF
\nroot@fs:\/usr\/src\/asterisk-21.6.0# cat \/etc\/odbcinst.ini
\n[MySQL]
\nDescription = ODBC for MySQL (MariaDB)
\nDriver = \/usr\/lib\/x86_64-linux-gnu\/odbc\/libmaodbc.so
\nFileUsage = 1<\/p>\n

root@fs:\/usr\/src\/asterisk-21.6.0# cat < \/etc\/odbc.ini
\n[MySQL-asteriskcdrdb]
\nDescription = MySQL connection to ‘asteriskcdrdb’ database
\nDriver = MySQL
\nServer = localhost
\nDatabase = asteriskcdrdb
\nPort = 3306
\nSocket = \/var\/run\/mysqld\/mysqld.sock
\nOption = 3
\nEOF<\/p>\n

6.Install FreePBX<\/strong>
\nroot@fs:\/usr\/src\/asterisk-21.6.0# cd \/usr\/local\/src
\nroot@fs:\/usr\/local\/src# wget http:\/\/mirror.freepbx.org\/modules\/packages\/freepbx\/freepbx-17.0-latest-EDGE.tgz
\nroot@fs:\/usr\/local\/src# tar zxvf freepbx-17.0-latest-EDGE.tgz
\nroot@fs:\/usr\/local\/src# cd \/usr\/local\/src\/freepbx\/
\nroot@fs:\/usr\/local\/src\/freepbx# .\/start_asterisk start
\nSTARTING ASTERISK
\nAsterisk Started<\/p>\n

root@fs:\/usr\/local\/src\/freepbx# .\/install -n
\nGenerating default configurations…
\nFinished generating default configurations
\nYou have successfully installed FreePBX<\/p>\n

7.Get the rest of the modules<\/strong>
\nroot@fs:\/usr\/local\/src\/freepbx# fwconsole ma installall
\nroot@fs:\/usr\/local\/src\/freepbx# fwconsole reload
\nReload Started
\nReload Complete
\nroot@fs:\/usr\/local\/src\/freepbx# fwconsole restart
\nRunning FreePBX shutdown…<\/p>\n

Running Asterisk pre from Core module
\nStopping Call Transfer Monitoring Service
\nCore FastAGI Server is not running
\nRunning Asterisk pre from Ucp module
\nStopping UCP Node Server
\n[->————————–] 1 sec
\nStopped UCP Node Server
\nShutting down Asterisk Gracefully. Will forcefully kill after 30 seconds.
\nPress C to Cancel
\nPress N to shut down NOW
\n[============================] < 1 sec Running FreePBX startup… Starting Asterisk… [============================] 2 secs Asterisk Started Running Asterisk post from Core module Starting Call Transfer Monitoring Service Stopping Call Transfer Monitoring Service Restarting Call Transfer Monitoring Service Starting Core FastAGI Server…<\/p>\n

[->————————–] 1 sec
\nStarted Core FastAGI Server. PID is 95704
\nRunning Asterisk post from Ucp module
\nStarting UCP Node Server…
\n[->————————–] < 1 sec
\nStarted UCP Node Server. PID is 95803<\/p>\n

 <\/p>\n

8.Set up systemd (startup script)<\/strong>
\nroot@fs:\/usr\/local\/src\/freepbx# cat < \/etc\/systemd\/system\/freepbx.service
\n[Unit]
\nDescription=FreePBX VoIP Server
\nAfter=mariadb.service
\n[Service]
\nType=oneshot
\nRemainAfterExit=yes
\nExecStart=\/usr\/sbin\/fwconsole start -q
\nExecStop=\/usr\/sbin\/fwconsole stop -q
\n[Install]
\nWantedBy=multi-user.target
\nEOF<\/p>\n

root@fs:\/usr\/local\/src\/freepbx# cat \/etc\/systemd\/system\/freepbx.service
\n[Unit]
\nDescription=FreePBX VoIP Server
\nAfter=mariadb.service
\n[Service]
\nType=oneshot
\nRemainAfterExit=yes
\nExecStart=\/usr\/sbin\/fwconsole start -q
\nExecStop=\/usr\/sbin\/fwconsole stop -q
\n[Install]
\nWantedBy=multi-user.target<\/p>\n

root@fs:\/usr\/local\/src\/freepbx# systemctl daemon-reload
\nroot@fs:\/usr\/local\/src\/freepbx# systemctl enable freepbx
\nCreated symlink \/etc\/systemd\/system\/multi-user.target.wants\/freepbx.service \u2192 \/etc\/systemd\/system\/freepbx.service.<\/p>\n

9.Goto URL Web Management<\/strong>
\nUsername >
\nPassword >
\nEmail >
\nSystem name ><\/p>\n

[Submit]<\/p>\n

\"\"<\/p>\n

\"\"<\/p>\n

Firewall to Our IPPBX Server<\/p>\n

root@fs:\/usr\/local\/src\/freepbx# iptables –version
\niptables v1.8.9 (nf_tables)
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p tcp –dport 8088 -j ACCEPT # HTTP
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p tcp –dport 22 -j ACCEPT # SSH
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p tcp –dport 443 -j ACCEPT # HTTPS
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p udp –dport 5060 -j ACCEPT # SIP
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p udp –dport 5061 -j ACCEPT # PJSIP
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p udp –dport 10000:20000 -j ACCEPT # RTP
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -p udp –dport 5038 -j ACCEPT # AMI
\nroot@fs:\/usr\/local\/src\/freepbx# iptables -A INPUT -j DROP<\/p>\n

root@fs:\/usr\/local\/src\/freepbx# mkdir \/etc\/iptables\/
\nroot@fs:\/usr\/local\/src\/freepbx# iptables-save > \/etc\/iptables\/rules.v4<\/p>\n

root@fs:\/etc\/iptables# iptables -nvL
\nChain INPUT (policy ACCEPT 0 packets, 0 bytes)
\npkts bytes target prot opt in out source destination
\n4 220 ACCEPT 6 — * * 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:80
\n29 2012 ACCEPT 6 — * * 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:9696
\n0 0 ACCEPT 6 — * * 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:443
\n892 531K ACCEPT 17 — * * 0.0.0.0\/0 0.0.0.0\/0 udp dpt:5060
\n892 531K ACCEPT 17 — * * 0.0.0.0\/0 0.0.0.0\/0 udp dpt:5061
\n0 0 ACCEPT 17 — * * 0.0.0.0\/0 0.0.0.0\/0 udp dpts:10000:20000
\n0 0 ACCEPT 6 — * * 0.0.0.0\/0 0.0.0.0\/0 tcp dpt:5038
\n2 104 DROP 0 — * * 0.0.0.0\/0 0.0.0.0\/0<\/p>\n

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
\npkts bytes target prot opt in out source destination<\/p>\n

Chain OUTPUT (policy ACCEPT 906 packets, 482K bytes)
\npkts bytes target prot opt in out source destination<\/p>\n

\u0e1a\u0e31\u0e19\u0e17\u0e36\u0e01\u0e01\u0e0e iptables<\/b>:<\/p>\n

\u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e43\u0e2b\u0e49\u0e01\u0e0e\u0e22\u0e31\u0e07\u0e04\u0e07\u0e2d\u0e22\u0e39\u0e48\u0e2b\u0e25\u0e31\u0e07\u0e23\u0e35\u0e1a\u0e39\u0e15\u0e23\u0e30\u0e1a\u0e1a \u0e04\u0e38\u0e13\u0e15\u0e49\u0e2d\u0e07\u0e1a\u0e31\u0e19\u0e17\u0e36\u0e01\u0e01\u0e0e:<\/p>\n

root@fs:\/etc\/fail2ban# apt-get install iptables-persistent -y
\nroot@fs:\/etc\/iptables# sudo netfilter-persistent save
\nrun-parts: executing \/usr\/share\/netfilter-persistent\/plugins.d\/15-ip4tables save
\nrun-parts: executing \/usr\/share\/netfilter-persistent\/plugins.d\/25-ip6tables save
\nroot@fs:\/etc\/iptables# sudo netfilter-persistent reload
\nrun-parts: executing \/usr\/share\/netfilter-persistent\/plugins.d\/15-ip4tables start
\nrun-parts: executing \/usr\/share\/netfilter-persistent\/plugins.d\/25-ip6tables start<\/p>\n

 <\/p>\n

\u0e15\u0e34\u0e14\u0e15\u0e31\u0e49\u0e07 Fail2Ban \u0e40\u0e1e\u0e37\u0e48\u0e2d\u0e40\u0e1e\u0e34\u0e48\u0e21\u0e04\u0e27\u0e32\u0e21\u0e1b\u0e25\u0e2d\u0e14\u0e20\u0e31\u0e22<\/b><\/p>\n

Fail2Ban \u0e40\u0e1b\u0e47\u0e19\u0e40\u0e04\u0e23\u0e37\u0e48\u0e2d\u0e07\u0e21\u0e37\u0e2d\u0e0a\u0e48\u0e27\u0e22\u0e1b\u0e49\u0e2d\u0e07\u0e01\u0e31\u0e19\u0e01\u0e32\u0e23\u0e42\u0e08\u0e21\u0e15\u0e35 Brute Force \u0e41\u0e25\u0e30 DDoS \u0e1c\u0e48\u0e32\u0e19\u0e01\u0e32\u0e23\u0e1a\u0e25\u0e47\u0e2d\u0e01 IP \u0e17\u0e35\u0e48\u0e44\u0e21\u0e48\u0e1b\u0e25\u0e2d\u0e14\u0e20\u0e31\u0e22\u0e2d\u0e31\u0e15\u0e42\u0e19\u0e21\u0e31\u0e15\u0e34 \u0e42\u0e14\u0e22\u0e40\u0e09\u0e1e\u0e32\u0e30\u0e01\u0e31\u0e1a\u0e01\u0e32\u0e23\u0e42\u0e08\u0e21\u0e15\u0e35 SIP<\/p>\n

root@fs:\/etc\/fail2ban# sudo nano \/etc\/fail2ban\/jail.local<\/p>\n

[DEFAULT]
\nbantime = 10m
\nfindtime = 10m
\nmaxretry = 5<\/p>\n

[sshd]
\nenabled = true
\nport = 9696
\nlogpath = \/var\/log\/auth.log
\nmaxretry = 3<\/p>\n

[asterisk]
\nenabled = true
\nport = 5060,5061
\nprotocol = udp
\nlogpath = \/var\/log\/asterisk\/full
\nmaxretry = 5<\/p>\n

root@fs:\/etc\/iptables# systemctl status fail2ban<\/p>\n","protected":false},"excerpt":{"rendered":"

Install FreePBX 17 on Debian 12 with Asterisk 21 Ref : […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,11],"tags":[],"class_list":["post-965","post","type-post","status-publish","format-standard","hentry","category-freepbx","category-voip"],"_links":{"self":[{"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/posts\/965","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/comments?post=965"}],"version-history":[{"count":15,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/posts\/965\/revisions"}],"predecessor-version":[{"id":983,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/posts\/965\/revisions\/983"}],"wp:attachment":[{"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/media?parent=965"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/categories?post=965"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/omtel.ltd\/index.php\/wp-json\/wp\/v2\/tags?post=965"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}