hello everyone. i am concerned about security to the PBX and i would like to discuss different fraud detection methods. Apart from making everything to secure the PBX (latest patches, iptables, firewalls, no outside users, strongs passwds,...) i would like to find out if there are any fraud detection techniques. As for my setup i do have a PBX running asterisk 11.4 and it has 3 sip trunks (over internet) -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20131018/f5b22950/attachment.html>
i use a CRON CDR database lookup every 10 minutes (it is a sort of a compromise period of time). The script checks for all tall and international calls for the last hour. The script has different thresholds for different territories. it works reliably but I think about more sophisticated algorithm to discover any fraud attempts (I want to analize the security log as well). BR, Dmitry Pavlenko -------------------------------------------- On Fri, 10/18/13, binary dreamer <binary.vortex at gmail.com> wrote: Subject: [asterisk-users] fraud detection To: "Asterisk Users Mailing List - Non-Commercial Discussion" <asterisk-users at lists.digium.com> Date: Friday, October 18, 2013, 10:09 AM hello everyone. i am concerned about security to the PBX and i would like to discuss different fraud detection methods.Apart from making everything to secure the PBX (latest patches, iptables, firewalls, no outside users, strongs passwds,...) i would like to find out if there are any fraud detection techniques. As for my setup i do have a PBX running asterisk 11.4 and it has 3 sip trunks (over internet) -----Inline Attachment Follows----- -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: ? ? ? ? ? ? ???http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: ???http://lists.digium.com/mailman/listinfo/asterisk-users
You could check out a company called pbxwall. They have a product that is more of a realtime fraud prevention. It is not free. We had a look at it and it looks like a pretty good product but budget did not allow us to get one. Pbxwall.com From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of binary dreamer Sent: 18 October 2013 07:09 To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] fraud detection hello everyone. i am concerned about security to the PBX and i would like to discuss different fraud detection methods. Apart from making everything to secure the PBX (latest patches, iptables, firewalls, no outside users, strongs passwds,...) i would like to find out if there are any fraud detection techniques. As for my setup i do have a PBX running asterisk 11.4 and it has 3 sip trunks (over internet) -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20131018/b62aea67/attachment.html>
Check out transnexus.... We use their product... Seems to work well On Oct 18, 2013 2:09 AM, "binary dreamer" <binary.vortex at gmail.com> wrote:> hello everyone. i am concerned about security to the PBX and i would like > to discuss different fraud detection methods. > Apart from making everything to secure the PBX (latest patches, iptables, > firewalls, no outside users, strongs passwds,...) i would like to find out > if there are any fraud detection techniques. > As for my setup i do have a PBX running asterisk 11.4 and it has 3 sip > trunks (over internet) > > > > -- > _____________________________________________________________________ > -- Bandwidth and Colocation Provided by http://www.api-digital.com -- > New to Asterisk? Join us for a live introductory webinar every Thurs: > http://www.asterisk.org/hello > > asterisk-users mailing list > To UNSUBSCRIBE or update options visit: > http://lists.digium.com/mailman/listinfo/asterisk-users >-------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20131116/48b8f1dc/attachment.html>