[asterisk-users] Intruder

Michael L. Young
Fri, 16 Nov 2012 17:08:12 -0000

----- Original Message -----

> From: "Felix Vazquez" <felix.vazquez at theboshgroup.com>
> To: asterisk-users at lists.digium.com
> Sent: Friday, November 16, 2012 11:20:46 AM
> Subject: [asterisk-users] Intruder

> I am in the asterisk CLI and can see an unidentified caller trying
> the make calls out of the asterisk system. How do I stop them? How
> do I identify them and how can I see how the go in?

> This is an example of what I would see:

> NOTICE[4098]: chan_sip.c:20063 handle_request_invite: Call from ''
to
> extension '90111235551212' rejected because extension not found.

I would recommend you read README-SERIOUSLY.bestpractices.txt, top level of
source code.

Another thing you can do is turn on security logging if you are using Asterisk
10/11.  Take a look at logger.conf.  It may provide you with some extra
information on who is trying to make the call.

Take a look at this page:
https://wiki.asterisk.org/wiki/display/AST/Important+Security+Considerations

I would recommend using fail2ban as well.

Michael
(elguero)