#Firewall Migration and Planning Guide
Plan and document existing firewall
Planning and documenting the migration of the firewall is critical, without it you're doomed. Over time configurations grow as rules and networks are added for specific purposes are often superseded or simply forgotten.
You need to document these as well as any other additional services or features (i.e. DHCP, DNS or VPN). This will assist you while you recreate the policies behind the firewall rules.

You can download a sample Firewall Planning Guide here:
Creating a Local #Fedora 12 #Yum Repository
![]()
Fedora 12 has just been released so it's time to add it to our arsenal of local yum repositories. We all know the importance of creating a local YUM repository on your LAN. Not only do you decrease the time it takes to download and install updates, you also decrease bandwidth usage.
This How To will show you a simple yet effective way of setting up your local Fedora 12 YUM repository and client.
TIP: Distribute your Fedora YUM configuration via your Puppet Master
#Fedora 12: Constantine – Released to repositories

Fedora 12 Overview
As always, Fedora continues to develop (http://www.fedoraproject.org/wiki/Red_Hat_contributions) and integrate the latest free and open source software (http://www.fedoraproject.org/wiki/Features). The following sections provide a brief overview of major changes from the previous release of Fedora.
For more details about other features that are included in Fedora 12 refer to their individual wiki pages that detail feature goals and progress:
http://www.fedoraproject.org/wiki/Releases/12/FeatureList
Throughout the release cycle, there are interviews with the developers behind key features giving out the inside story:
http://www.fedoraproject.org/wiki/Interviews
The following are major features for Fedora 12:
* Improved WebCam support
* Better Video Codec
* Audio Improvements
* Better Power Management
Some other features in this release include:
* Automatic bug reporting tool
* Bluetooth on demand
* Many, many virtualization enhancements
* Still more security improvements
Features for Fedora 12 tracked on the feature list page:
http://www.fedoraproject.org/wiki/Releases/12/FeatureList
A discussion putting these features in context may be found at:
http://www.fedoraproject.org/wiki/Fedora_12_Talking_Points
Original Document: http://docs.fedoraproject.org/release-notes/f12/en-US/html/
#Asterisk LibPRI outbound MOH fix
This is a very simple and effective 'work around' for the popular Asterisk outbound Music on Hold (MOH) issue. This is a default Asterisk setting that will play your own MOH on an outbound call, which has proved to be problematic. More often than not, and all the time with certain dialed numbers (depending on the dialed company's PBX system), the caller (you) is put on hold, and your Asterisk system plays your [default] MOH music. When the call is unholded by the remote party, the call on your side is not retrieved, resulting in your MOH being played indefinitely, loosing the call - very unprofessional, and you are guaranteed this will happen to your CEO, to his most frequent dialed business partners !
Reason: Within the Asterisk Kernel, it is coded to play the [default] Message on Hold (MOH) class, which is the same for all calls made internally to another extension. You can create many MOH classes, but only the [default] is used for external calls. It is also a bug in the way LibPRI processes ISDN on-hold frames, and won’t be fixed in current Asterisk 1.4, but will be an option to turn this off in DAHDI Asterisk 1.6 (so I have read). We have tried and tested 1.6, and was introduced to a whole new range of problems (other advice - stick to 1.4!). Asterisk also has issues interpreting certain DTMF tones, so does not know when to unhold a call, because never receives or interprets the unhold tone sent by remote PBX system. On the 'Outbound Routes' option in FreePBX, you can set the MOH to none, but does not work, still uses default.
Relates to:
AsteriskNOW
Trixbox
Elastix - My best choice of a complete Asterisk PBX Solution!
Other Asterisk installed by source, possibly on Ubuntu
All the above are available for ISO download, and based on CentOS 5 Core.
Solutions
a) Hire a very expensive Asterisk Guru to recode your current Asterisk Kernel to suit you (other issues will arise, and you will have to folk out a lot more money)...
OR
b) Simply do it yourself with the tools provided in three easy steps! After many late nights Googling and trying to figure out the Kernel / Code myself, I came up with a very simple, right in front of you, simple solution. The only downfall here, is that internally dialed extensions (you to a work mate) will not play music on hold, the person on hold will only hear silence, which is worth it!
Create a new Music on Hold class, and configure the music.
Firstly browser to your FreePBX GUI, navigate to 'Music on Hold', select 'Add Music Category', and give it a name. For now I will name it CompanyA.
In your Linux console, this will create a folder in /var/lib/asterisk/mohmp3/CompanyA/
# ll /var/lib/asterisk/mohmp3/
Copy your music from /var/lib/asterisk/mohmp3/ to this new directory:
# cp /var/lib/asterisk/mohmp3/*.mp3 (or WAV) /var/lib/asterisk/mohmp3/CompanyA
Change ALL your Inbound Lines and Queues
Next Change ALL your Inbound Lines and Queues within FreePBX GUI to use this new MOH class 'CompanyA'. You dont have to do this for inbound Fax lines if you are making use of Fax to Email, like Hylafax. I left mine as Default.
You can script this, but its a much longer process to create a script, rather than simply doing it via the GUI. If you backup your asterisk folder, or rsync it, then change a field or two in FreePBX, then run rsync again or diff on the files, it changes more than one config file, and just becomes confusing. Get your IT desktop guy to do the manual work, otherwise please post the script!
Edit config file and restart Asterisk
Finally all you need to do is edit a config file, reload Asterisk, and you're done!
# vim /etc/asterisk/musiconhold_additional.conf
Comment out the [default] MOH class to point to /dev/null (this deactivates the MOH feature completely for this class). Comment out and add for easy roll-back, always think ahead!
[CompanyA] mode=files directory=/var/lib/asterisk/mohmp3/CompanyA/ random=yes [default] mode=files directory=/dev/null ;[default] ;mode=files ;directory=/var/lib/asterisk/mohmp3/
FINALLY - in FreePBX, 'Reload Asterisk'... and you're done!
Result: From here, when you make an outbound call, and you are put on hold, you will hear the dialed party's Music on Hold (or whatever they have) instead of yours. This reassures you that the call has not dropped, and you are still on hold. There is no DTMF tones or frames that your Asterisk box has to interpret, taking the fault away from your side. Your CEO will be happy that now he can actually wait on hold for a board member and not be cut off, and wondering why they called person has not come back to him.
