GO HERE Where is the whitelist file containing all allowed FQDNs and IPs? What are the VSPs of the 67 unnamed IPs?

[chris_c_]

I'm nearly finished making a working UFW version of the firewall. However, I'm having difficulty locating the whitelist file containing all allowed VOIP Service Provider (and other misc) FQDNs and IPs that come with IncrediblePBX 2025 for Debian 12. Assuming the same list comes with all the IPBX versions.

Anyone know where to find the complete whitelist, and where and how in the code do these hostnames and IP's get added to iptables?

I've attached the output of iptables -L , which lists all the whitelisted allowed FQDNs and IPs.

PS I see one allowed FQDN that obviously looks like it does not belong, server.zimbabwewebdesign.com , who added that one?? Why?? It's not a VOIP Service Provider, isn't it?

 

[kenn10]

/usr/local/sbin/iptables-custom plus several executables in the same directory. New ones added via /root/add-ip and
/root/add-fqdn

 

[chris_c_]

In the file /usr/local/sbin/iptables-custom, lines 20-87, there's no comments about those 67 IPs. Anyone have any clue where are the name(s) of the VOIP Service Provider(s) that those commands are opening access to the IPBX server for?

EDIT: The IPs in question.. lines 20-87 of iptables-custom ...
What VOIP Service Providers are they from, if any?:

(.....)
# // End entries for Skyetel.iptables
/usr/sbin/iptables -A INPUT -s 64.2.142.215/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.216/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.9/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.17/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.18/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.29/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.87/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.106/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.107/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.109/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.111/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.187/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.188/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.189/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.190/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.214/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.26/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 199.101.184.146/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 199.101.184.146/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 174.34.146.162/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 173.208.83.50/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 74.54.54.178/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 209.62.1.2/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 67.215.241.250/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 74.63.41.218/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 69.147.236.82/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 68.233.226.97/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 67.205.74.184/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 67.205.74.187/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 174.137.63.206/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 174.137.63.202/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 5.77.36.136/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 204.11.192.32/30 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 204.155.28.10/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.136.174.24/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.136.174.24/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.34.181.47/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 69.90.174.98/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 85.17.186.7/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 81.23.228.129/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 67.228.182.2/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.251.23.244/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 85.17.148.32/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 63.211.239.14/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 63.247.78.218/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 8.3.252.23/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 8.14.120.23/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 8.17.37.23/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 66.54.140.46/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 66.54.140.47/32 -p udp -m multiport --dports 5060,5061,5062,5063,5064,5065,5066,5067,5068,5069,4569 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.62.236.143/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 24.211.64.206/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 199.30.56.194/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
#/usr/sbin/iptables -A INPUT -s 209.216.15.70/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
#/usr/sbin/iptables -A INPUT -s 209.216.2.211/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 184.154.97.11/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 81.23.228.150/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 81.23.228.150/32 -p tcp -m tcp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 65.254.44.194/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 74.81.71.18/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 50.22.101.14/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 67.212.84.21/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 176.9.39.206/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 72.9.149.25/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 50.22.102.242/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 98.254.157.185/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 178.63.143.236/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 98.254.157.185/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
/usr/sbin/iptables -A INPUT -s 64.2.142.26/32 -p udp -m udp --dport 5060:5069 -j ACCEPT
# new additions
(.....)

 

[kenn10]

They were for a ton of different VOIP providers. Ward used to include a whole bunch of pre-configured trunks with IncrediblePBX but they were all based on chan_sip. I don't recall if they are still there on an IncrediblePBX-2025 install or not. I always deleted the trunks and rebuilt for the ones I use.