Server

Securing Configuration Files with HTTP Authentication

  • Hackers are routinely scanning IP addresses for open ports and if they find an IP address vulnerable to brute force scanning they will execute a remote Provisioning scan using the first 6 digits of popular vendor ID’s like Polycom, Yealink and then brute force the last 6 digits of a 12 digit MAC address.
  • By example a ScopTEL server using the default HTTP listen port of 5555 can be attacked using this method. Other vendors are also vulnerable on whatever HTTP listen port they use to remotely provision IP phones.
  • TFTP is especially vulnerable on UDP port 69 because no specific path is required to the MAC.cfg file. Only the <MAC>.cfg variable is required to harvest the MAC.cfg file. TFTP should be denied on the Firewall whenever possible.
  • If you have enabled Telephony>Configuration>Security>Flood Protection and the ScopTEL Firewall and Telephony Flood Protection (Fail2ban) Service then the remote attacker’s IP address will be blacklisted by the Firewall when a brute force attack is detected.
  • But if the remote attacker knows of a valid MAC address on the network then this MAC.cfg file can easily be harvested unless HTTP Authentication is configured. The exact methodology won’t be published here as this should not be public knowledge.
  • This document will explain how to lock down a server using HTTP Authentication

 

ScopTEL - Securing Configuration Files with HTTP Authentication
Read More

Managing Backups for Multiple ScopTEL Systems

  • ZIP and tar and 16 bit applications and are therefore limited in creating a maximum file size of 4Gb. Therefore if the compressed backup will be larger than 4Gb the backup will be truncated due to the limitations of these 16 bit applications.
  • Remote backups to FTP servers can be difficult due to NAT issues. If the ScopTEL server is behind NAT and the remote FTP server is behind NAT it is doubtful that the remote backup will succeed due to the number of dynamic ports that must be allocated for the file transfers.
  • Local Backup (File) is not a recommended backup Destination in the ScopTEL Backup Manager because it will create a local backup file each time it is executed and this can result in low drive space.
  • If you are backing up a server in order to migrate to another platform it is highly recommended you use the method published in our knowledgebase at https://blog.scopserv.com/2018/10/putty-and-winscp-backup-and-restore-method/ the purpose of the document you are reading is to schedule remote backups especially if you are an administrator trying to automate backups for multiple remote systems.

 

ScopTEL - Managing Backups with Acrosync
Read More

Putty and WinSCP Backup and Restore Method

The Putty and WinSCP Backup Method is the recommended method to backup a ScopTEL Server. It is nearly foolproof and backs up all required data.

 

Module 18 - ScopTEL - Backup_Restore Using Putty_WinSCP
Read More

Performance Tuning Recommendations for ScopServ HTTPD Server Properties.

Performance tuning your HTTPD server settings can avoid things like high memory usage and swap file usage.

 

apachetuning

 

Memory Limit (PHP): Default 128 MB
Maximum amount of memory a script may consume
ScopServ recommends the default setting.  Only increase this value if a commit fails to complete due to memory exhaustion.

Minimum number of idle child server processes: Default 10
This directive sets the desired minimum number of idle child server processes. An idle process is one which is not handling a request. If there are fewer spareservers idle then specified by this value, then the parent process creates new children at a maximum rate of 1 per second. Setting this parameter to a large number is almost always a bad idea.

ScopServ recommends adjusting the value for this setting to the following:
Virtualized server 5
Dedicated server with 1-2GB RAM 10
Dedicated server with 2-4GB RAM 20
Dedicated server with 4+ GB RAM 25

Maximum number of idle child server processes: Default 20
This directive sets the desired maximum number of idle child server processes. An idle process is one which is not handling a request. If there are more than MaxSpareServers idle, then the parent process will kill off the excess processes.
This value should be set as double the value that is set in ‘Minimum number of idle child server processes’.

Maximum number of connections that will be processed simultaneously: Default 256
This directive sets the limit on the number of simultaneous requests that will be served. Any connection attempts over the specified limit will be queued. Once a process is freed at the end of a different request, the queued connection will then be served.
For virtualized servers it is recommended to set this value at 150. For all dedicated servers the recommended value for this setting is 256.

Limit on the number of requests that an individual child server will handle during its life: Default 4000
This directive sets the limit on the number of requests that an individual child server process will handle. After the number of requests reaches the value specified, the child process will die. When this value is set at 0, then the process will never expire.

ScopServ recommends adjusting the value for this setting to the following:
Virtualized server, 300
Dedicated server with 1-4GB RAM 500
Dedicated server with 4+GB RAM 1000

Read More

CentOS 5 Official Support Closure

As previously advised in the ScopServ blogs and ScopNEWS, CentOS 5 has now officially reached its End Of Life date. As a result, CentOS has officially shutdown their official repositories for CentOS EL5.

centoscycle

From now, if you are updating your existing ScopTEL EL5 packages this may cause errors similar to the following:

[root@pstn ~]# scopserv_yum update

==== scopserv_yum ====

— Executing yum…

Loaded plugins: fastestmirror

Loading mirror speeds from cached hostfile

* centos-extras: mirror.netaddicted.ca

* centos-os: centos.mirror.iweb.ca

* centos-updates: centos.mirror.iweb.ca

* scopserv: us.mirrors.scopserv.com

http://mirror.netaddicted.ca/CentOS/5.11/extras/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404: Not Found

Trying other mirror.

http://mirror2.evolution-host.com/centos/5.11/extras/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404: Not Found

Trying other mirror.

http://centos.mirror.ca.planethoster.net/5.11/extras/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404: Not Found

Trying other mirror.

http://centos.bhs.mirrors.ovh.net/ftp.centos.org/5.11/extras/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404: Not Found

Trying other mirror.

http://centos.westmancom.com/5.11/extras/x86_64/repodata/repomd.xml: [Errno 14] HTTP Error 404: Not Found

Trying other mirror.

centos-extras                                                                                     | 2.1 kB     00:00

 

This does not mean your installation is broken, it simply means that the official CentOS EL5 mirrors have been shut down. ScopServ has released a new scopserv-server package that uses vault.centos.org to maintain existing dependencies.  This package will be automatically installed via scopserv_yum update and if the scopserv-server package is updated you will not see this error the next time you do scopserv_yum update.

Here are the options to resolve the error (pick one):

  1. Update your packages using the ScopTEL GUI
  2. From a bash prompt execute ‘scopserv_yum update’ (omitting quotes)
  3. ‘rpm –Uvh http://download.scopserv.com/dist/packages/scopserv-server/scopserv-server-5.1.6.11.20170601-1.nodist.scopserv.noarch.rpm’ (omitting quotes)

Since CentOS 5 is officially End Of Life ScopServ highly recommends that you upgrade your installation to CentOS 6.

A failure to do so will put your installation at risk since CentOS EL5 is no longer supported.

Please follow the official instructions to upgrade your installation at

https://blog.scopserv.com/2016/12/scoptel-centos-6-x-bootdisk-installation-guide/

ScopServ will not be responsible for any liabilities caused by a failure to upgrade to a supported Operating System.  Additionally, ScopServ will be announcing an End Of Life date for ScopServ EL5 packages and support in the near future.

Read More

Avertissement Produit – Migration obligatoire du journal des files d’attente suite à la mise à jour de ‘scopserv-reports’ et ‘scopserv-realtime’ de la version 5 à la version 6 

Très Important

  • Les paquetages ‘scopserv-reports’ et ‘scopserv-realtime’ version 5 utilisent une méthode de transport plus ancienne et un fichier texte queue_log pour générer des rapports téléphoniques alors que ceux de version 6 sont hautement optimisés; nouveau transport par WebSockets et traitement des données ACD dans des tables SQL.
  • Mettre à jour les paquetages ‘scoperv-reports’ et ‘scopserv-realtime’ de version 5 vers la version 6 nécessitera l’exécution manuelle d’un script de migration du journal des files d’attentes sinon les nouvelles données pourraient ne pas être traitées.
  • Référez-vous immédiatement au bulletin ci-dessous avant la mise à jour des paquetages ‘scopserv-reports’ et ‘scopserv-realtime’ prévue le 31 janvier 2017.
  • Il est fortement recommandé de redémarrer votre serveur afin d’éviter des fuites de mémoire après avoir effectué une mise à jour des paquetages!
ScopTEL-scoptel-reports_scopserv-realtime_Release-5to6-queuelog_migration_fr

 

Read More

ScopTEL Version 5 to Version 6 scopserv-reports scopserv-realtime post upgrade mandatory Queue Log Migration Product Bulletin

  • Importance HIGH!
  • Official Release date is January 31st 2017
  • ScopServ scoptel-reports and scoptel-realtime release 5 packages use an older transport method and a flat queue_log file to generate Telephony Reports while the release 6 versions are highly optimized using a new WebSockets Transport and process raw ACD data to SQL tables.
  • Upgrading scoperv-reports and scopserv-realtime release 5 packages to release 6 scopserv-reports and scopserv-realtime packages will require you to manually execute the Queue Log Migration script else post upgrade reporting data will not be processed!
  • Please refer immediately to the this official Product Bulletin prior to the scopserv-reports and scopserv-realtime packages release date scheduled for January 15th 2017.
  • It is highly recommended you reboot your server to kill processes which might leak memory after updating the packages!
ScopTEL-scoptel-reports_scopserv-realtime_Release-5to6-queuelog_migration-el56
Read More

ScopTEL CentOS 6.X BootDisk Installation Guide

  • Previous versions of ScopTEL were either based on CentOS versions 4 or 5
  • However these versions have limited lifecycle support and it was necessary for ScopServ International to Release an installation ISO based on CentOS version 6.X

centoscycle

  • Refer to the official ScopServ Documentation to install CentOS el6
ScopTEL-CentOS6_-BootDisk-Installation-Guide
Read More

How To Configure a ScopTEL Installation From Start to Finish

If you have already installed ScopTEL on a server and aren’t sure what to do next then follow this comprehensive configuration guide:

ScopServ - Basic Installation Hierarchy for Telephony Server New Design v04
Read More

ScopTEL Documentation Collection Downloads

It is recommended that you read each Training Module in numerical order.

Module 0:

  • Previous versions of ScopTEL were either based on CentOS versions 4 or 5
  • However these versions have limited lifecycle support and it was necessary for ScopServ International to Release an installation ISO based on CentOS version 6.X

centoscycle

  • Refer to the official ScopServ Documentation to install CentOS el6

 

ScopTEL-CentOS6_-BootDisk-Installation-Guide

 

Module 1:

CentOS 5 DVD ISO Boot Disk Installation (deprecated, use CentOS el6)

Module 1 - ScopTEL - CentOS5 DVD ISO Boot Disk Installation

 

Module 2:

Basic ifconfig

Module 2 - ScopTEL - Basic ifconfig

 

Module 3:

Server Installation Wizard

ScopTEL - DNS Server Configuration Wizard

 

Module 4:

Version Switcher for Telephony

Module 4 - ScopTEL - Version Switcher for Telephony Server

 

Module 5:

PSTN Interfaces and Gateways

Module 5 - ScopTEL - PSTN Interfaces and Gateways

 

Module 6:

Outgoing Lines and Interface Groups

Module 6 - ScopTEL - Interface Groups and Outgoing Lines

 

Module 7:

Incoming Lines Management

Module 7 - ScopTEL - Incoming Lines Management

 

Module 8:

Class of Service Configuration

Module 8 - ScopTEL - Class of Service Configuration

 

Module 9:

Extensions Management

Module 9 - ScopTEL - Extensions Management

 

Module 10:

Automatic Provisioning System

Module 10 - ScopTEL - Automatic Provisioning System

 

Module 11:

Prompt Management

Module 11 - ScopTEL - Prompt Management

 

Module 12:

Managing Schedules

Module 12 - ScopTEL - Managing Schedules

 

Module 13:

Managing Conferences:

Module 13 - ScopTEL - Managing Conferences

 

Module 14:

Managing Auto Attendants/IVR

Module 14 - ScopTEL - Managing Auto Attendants

 

Module 15:

Managing Automatic Call Distribution

Module 15 - ScopTEL - Managing ACD

 

Module 16:

Managing Applications

Module 16 - ScopTEL - Managing Applications

 

Module 17:

Backup and Restore Using the Server Manager GUI

Module 17 - ScopTEL - Backup and Restore

 

Module 18:

Backup and Restore Using Putty and WinSCP

Module 18 - ScopTEL - Backup_Restore Using Putty_WinSCP

 

Module 19:

Troubleshooting

Module 19 - ScopTEL - Troubleshooting

 

Module 20:

Quality of Service Training

Module 20 - ScopTEL - Quality of Service Training

 

Module 21:

ScopTel Reports Summary

Module 21 - ScopTEL - Reports Summary

 

Module 22:

Sangoma/Vegastream Gateway Configuration

Module 22 - ScopTEL - Sangoma Gateway Configuration

 

Module 23:

Sangoma Hardware Transcoding Integration Installation

Module 23 - ScopTEL - Sangoma Transcoding Installation

 

Module 24:

Asterisk 11 T.38 Fax Gateway Configuration

Module 24 - ScopTEL - Asterisk 11 T.38 Fax Gateway Configuration

 

Module 25:

Avaya IP Office Conference Bridge Integration (Add Conference Bridging to IP Office Using ScopTEL)

Module 25 - ScopTEL - Avaya IP Office Conference Bridge

 

System Network Lab (Hands On: Learn How To Network Multiple Servers Using SIP Tie Trunks):

Module LAB - ScopTEL - System Networking LAB

 

How to set up a Server to Server SIP Trunk:

ScopTEL - How to set up a Server to Server SIP Trunk

 

ScopTEL Fixed Mobile Convergence and Follow Me:

ScopTEL - Fixed Mobile Convergence and Follow Me

 

ScopTEL Networking DHCP Configuration:

ScopTEL - DHCP Configuration

 

Configuration ScopTEL SIP for Network Address Translation/NAT:

ScopTEL - Configuring ScopTEL for NAT

 

ScopTEL Cisco SIP Phone Integration:

ScopTEL - Cisco SIP Phone Integration

 

ScopTEL Certificate Manager (How To Configure a ScopTEL Server to Support HTTPS GUI management and Encrypted Media and Signalling):

ScopTEL - Certificate Manager

 

How To Optimize a ScopTEL Installation to Save Voice Recordings:

ScopTEL - Call Recording Server Optmization

 

ScopTEL Installation Hierarchy (If you are new to ScopTEL follow this document to manage the correct flow of your new installation to optimize configuration prerequisites):

ScopServ - Basic Installation Hierarchy for Telephony Server New Design v04

 

How To Configure Customer Call Ratings Using IVR Menus and Custom Scripts:

Rating calls using IVR menus and custom scripts

 

End User Voicemail Cheat Sheet:

ScopTEL Voicemail End User Card

 

Configuring Speed Dials and PIN’s Using Outgoing Line Configurations:

ScopTEL - Speed Dials and Outgoing Line Configurations

 

How To Configure the Same Extension Number On Multiple SIP Devices:

ScopTEL - Shared Users for Devices

 

Background On directmedia/re-INVITE Management in ScopTEL:

ScopTEL - RTP directmedia handling

 

Using Join.me to Support Customers (use for webinars, remote help sessions, desktop sharing, conference bridging):

ScopTEL - Remote Support Using join.me

 

End User Guide for Polycom SoundPointIP Phones (integrated with ScopTEL Proprietary EFK functions):

ScopTEL - Polycom End User Training

 

ScopTEL Installation on Mediatrix Sentinel Virtual Machine (How To):

ScopTEL - Mediatrix Sentinel ScopTEL VM Installation

 

How To Integrate a ScopTEL Installation with a Mediatrix ISDN Gateway (T1/E1 Interfaces):

ScopTEL - Mediatrix ISDN Gateway Configuration

 

How To Integrate a ScopTEL Installation with a Mediatrix Trunk, Station Gateway (Analog/POTS FXO/FXS):

ScopTEL - Mediatrix Analog Gateway Configuration

 

If you are an ITSP looking to terminate SIP VoIP Interfaces to Reseller or End User ScopTEL installations you need to read this:

ScopTel - ITSP SIP Trunking

 

And End User Guide for Snom Phone Users:

ScopTEL - Snom End User Training

 

ScopServ Quick Sales Presentation:

ScopServ Presentation 2015

 

ScopServ Full Customer Presentation:

General Presentation ScopTEL ENGLISH

 

ScopTEL ScopSTATS Reporting Admin Guide:

ScopSTATS_Manual

 

ScopTEL Automatic Call Distribution Customer Presentation:

Presentation ScopServ ACD English V3

 

ScopTEL Feature List:

ScopTEL Feature List

 

Required Settings for Gmail or Office 365 SMTP Smart Relay

Gmail and Office 365 each require unique settings for Smart Relay Configuration.  This document describes each.

ScopTEL - SMTP Relay Settings Gmail Office 365

 

Call Forwarding End User Guide

Users can manage their Call Forwarding rules using this cheat sheet.

ScopTEL Call Forwarding End User Card

 

ACD Pause Code Usage

A simple ‘how to’ explaining ACD Pause Code Usage

ScopTEL ACD Pause Code Usage

 

How to Provision Bria

Basic pre-requisites to provision Bria

ScopTEL - How to Provision Bria
Read More