[arm-allstar] Supermon asterisk manager connection fails

[Rory Bowers]

Hi Doug,
I just noticed something when I was reading your post to Jorge.  In my copy
of manager.config there is no "user/pass" line.  I am still trying to
figure out why supermon isn't running.  No buttons, just a screen full of
info about Supermon and allmon 2.
Rory Bowers, K5CKS

;

; AMI - The Asterisk Manager Interface

;

; Third party application call management support and PBX event
supervision
;

; This configuration file is read every time someone logs in

;

; Use the "manager list commands" at the CLI to list available manager
commands
; and their authorization levels.

;

; "manager show command <command>" will show a help text.

;
;

; ---------------------------- SECURITY NOTE
-------------------------------
; Note that you should not enable the AMI on a public IP address. If
needed,
; block this TCP port with iptables (or another FW software) and reach it

; with IPsec, SSH, or SSL vpn tunnel.  You can also make the manager

; interface available over http if Asterisk's http server is enabled in

; http.conf and if both "enabled" and "webenabled" are set to yes in

; this file.  Both default to no.  httptimeout provides the maximum

; timeout in seconds before a web based session is discarded.  The

; default is 60 seconds.

;

[general]

displaysystemname = yes

enabled = yes

webenabled = yes

port = 5038



httptimeout = 60

; a) httptimeout sets the Max-Age of the http cookie

; b) httptimeout is the amount of time the webserver waits

;    on a action=waitevent request (actually its httptimeout-10)

; c) httptimeout is also the amount of time the webserver keeps

;    a http session alive after completing a successful action



;bindaddr = 127.0.0.1   ; Local interface only!

bindaddr = 0.0.0.0    ; Not secure
;
displayconnects = yes

;

; Add a Unix epoch timestamp to events (not action responses)

;

;timestampevents = yes



[admin]

secret = (my password)

read = all,system,call,log,verbose,command,agent,user,config

write = all,system,call,log,verbose,command,agent,user,config

On Sat, May 12, 2018 at 10:48 AM, "Doug Crompton via arm-allstar" <
arm-allstar at hamvoip.org> wrote:

> Jorge,
>
>  When you say firewall do you mean the firewall in Allstar? Do you have
> that turned on? If is off by default and in most cases should not need to
> be turned on unless your allstar server is directly on the Internet and not
> NAT'ed by a router.
>
> For Supermon to work remotely outside of your LAN you need to have port
> 5038 forwarded in the routers and in manager.conf you must have the 0.0.0.0
> bind address active (comment out the 127.0.0.1 and uncomment the 0.0.0.0
> address).
>
> You obviously also add the actual address or domain name of the host in the
> allmon.ini file for that remote node.
>
> Allstar should be restarted when making changes especially the manager
> changes.
>
> Since port 5038 and the AMI is not very secure and you are allowing it
> through your router you also should implement the firewall rule shown in
> the Supermon howto,
>
> I run several remote Supermon instances using this method and it works
> fine. See the Supermon howto.
>
>
> *73 Doug*
>
> *WA3DSP*
>
> *http://www.crompton.com/hamradio <http://www.crompton.com/hamradio>*
>
>
> On Sat, May 12, 2018 at 10:54 AM, "Jorge Mejia P via arm-allstar" <
> arm-allstar at hamvoip.org> wrote:
>
> >
> > In an attempt to set up My Supermon connection from outside of my Lan
> > which wasn't working, a fellow ham suggested to run the cmd
> > iptables -F
> >
> > Since Then I get - connecting to asterisk manager.... on Supermon but it
> > never makes connection.
> > Looks like port 5038 is being held by the Firewall.
> > BTW , I went again through the whole config process passwords etc at no
> > avail.
> >
> > Anyone has information on how to address this issue ?
> >
> > Thank you
> > Jorge hk4cze
> >
> > _______________________________________________
> >
> > arm-allstar mailing list
> > arm-allstar at hamvoip.org
> > http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
> >
> > Visit the BBB and RPi2/3 web page - http://hamvoip.org
> >
> _______________________________________________
>
> arm-allstar mailing list
> arm-allstar at hamvoip.org
> http://lists.hamvoip.org/cgi-bin/mailman/listinfo/arm-allstar
>
> Visit the BBB and RPi2/3 web page - http://hamvoip.org
>