similar to: Introducing easySysAdmin - automated security and telecom fraud protection

[This email is either empty or too large to be displayed at this time]

Do you have DISA setup? We're seeing lots of attackers running scripts that send digits until they strike a DISA, misconfigured mailbox, etc. (Assuming it wasn't a stupid employee forwarding an inbound call to a 9xxxxxxx number etc). Have a look at SecAst (www.generationd.com) - it detects callers sending too many digits, monitors digit dialing speeds, etc. to help identify and block

Hi Dovid, We can change the SDP in Kamailio, but Asterisk will still send its RTP from its default address. The remote end is strict about accepting RTP from the specified source and won't accept it. Have you any suggestions to solve that problem? Thank you. On Fri, 30 Oct 2020 at 14:49, Dovid Bender <dovid at telecurve.com> wrote: > Why not use OpenSips/Kamailoo in between?

Hello, Does anyone know a way with chan_sip to tell Asterisk to use a specific IP address for its end of the communication for a specific device? Something like: [device] type = friend host = 11.22.11.22 ouraddress = 33.44.33.44 This is for use on a server with multiple IP addresses. There is the "extenip" setting, but it's really designed for NAT, and can only appear in the

You don't mention if the phone is remote, or local. Although you do mention it had a default user/pass. If the UI of the phone was/is accessible from the I'net, the GUI does have the ability to place a call from it, that is one way the calls could have been placed. From: asterisk-users-bounces at lists.digium.com [mailto:asterisk-users-bounces at lists.digium.com] On Behalf Of Steven

Hi David, It seems like a network issue to me, As it's unable to connect the other node and getting timeout. Few things you can check- * Check the /etc/hosts file on both the servers and make sure it has the correct IP of the other node. * Are you binding gluster on any specific IP, which is changed after your update. * Check if you can access port 24007 from the other host. If

Why not use OpenSips/Kamailoo in between? Where you want 1.1.1.1 you pass it along as is. Where you want 2.2.2.2 change the sdp in opensips/kamailio On Thu, Oct 29, 2020 at 20:44 David Cunningham <dcunningham at voisonics.com> wrote: > Hello, > > Does anyone know a way with chan_sip to tell Asterisk to use a specific IP > address for its end of the communication for a specific

OK, thank you George. On Sat, 24 Oct 2020 at 03:16, George Joseph <gjoseph at digium.com> wrote: > > > On Thu, Oct 22, 2020 at 4:13 PM David Cunningham < > dcunningham at voisonics.com> wrote: > >> Hi George, >> >> Thank you for the response. I'm a little unclear on what you mean by a >> transport. We're using chan_sip, not pjsip.

On Thu, Oct 22, 2020 at 4:13 PM David Cunningham <dcunningham at voisonics.com> wrote: > Hi George, > > Thank you for the response. I'm a little unclear on what you mean by a > transport. We're using chan_sip, not pjsip. > > Do you mean a device in sip.conf, using bindaddr to set the address to > bind for that device? We've only used bindaddr in the

I don't know in that specific output what happened. Your best course of action is to add further logging or step through the logic with all of the knowledge you have of the RTP streams to understand what is happening. On Mon, Apr 17, 2023 at 8:52 PM David Cunningham <dcunningham at voisonics.com> wrote: > Hi Joshua, > > Thank you for that. From the code it kind of looks like

Hi Joshua, Thank you for that. From the code it kind of looks like STRICT_RTP_LEARN_TIMEOUT is a minimum, not a maximum: if (!ast_sockaddr_isnull(&rtp->strict_rtp_address) && STRICT_RTP_LEARN_TIMEOUT < ast_tvdiff_ms(ast_tvnow(), rtp->rtp_source_learn.start)) { ast_verb(4, "%p -- Strict RTP learning complete - Locking on source address %s\n", Our call shows: #

hello everyone. i am concerned about security to the PBX and i would like to discuss different fraud detection methods. Apart from making everything to secure the PBX (latest patches, iptables, firewalls, no outside users, strongs passwds,...) i would like to find out if there are any fraud detection techniques. As for my setup i do have a PBX running asterisk 11.4 and it has 3 sip trunks (over

It's probably best if you read the logic[1]. There's an entire comment that talks about how it works. [1] https://github.com/asterisk/asterisk/blob/20/res/res_rtp_asterisk.c#L8158 On Mon, Apr 17, 2023 at 7:10 PM David Cunningham <dcunningham at voisonics.com> wrote: > Hi Joshua, > > Could you confirm if the 5 second period for learning a new audio stream > is a minimum

Hi, Some days ago I spent about US$700,00 in a Tormenta III board in www.govarion.com. I used credit card. I didn't receive any answer for my emails and there is no telephone number to contact them.. Now, I'd like to cancel this order, because I couldn?t wait so long, and my credit card was billed. Is www.govarion.com a fraud ???? Does anybody know something about them ?? Thanks.

I?ve seen the following exploits of Asterisk / FreePBX boxes: 1) Default PlcmSpIp username and password for Polycom provisioning 2) Insecure SIP usernames and secrets 3) FreePBX GUI accessable from the internet 4) OS remote exploit (maybe ssh/ssl exploit) Mitigation options: 1) Don?t use an easy to guess or default password on provisioning servers. 2) Use secure secrets. Users never

Hi George, Thank you for the response. I'm a little unclear on what you mean by a transport. We're using chan_sip, not pjsip. Do you mean a device in sip.conf, using bindaddr to set the address to bind for that device? We've only used bindaddr in the [general] section before, but if it will work in a device that could be the answer. On Fri, 23 Oct 2020 at 00:13, George Joseph

Hi David, Gluster supports live rolling upgrade, so there is no need to redeploy at all - but the migration notes should be checked as some features must be disabled first. Also, the gluster client should remount in order to bump the gluster op-version. What kind of workload do you have ? I'm asking as there are predefined (and recommended) settings located at /var/lib/gluster/groups . You

Hello, I'm investigating a situation where there was a hundreds of minutes of calls from an internal SIP extension to an 855 number in Cambodia, resulting in a crazy ($25,000+) bill from the phone company. I'm investigating, but can anyone provide some feedback on what's happened here? I'm investigating how this happened as well as what types of arrangements can be made with the

hi, i have strange problem with call-limit/groupcount limiting. i set up limit of 2 calls. i'm using both methods but a for few times i have problem with successfull fraud with more calls than 2 asterisk is 1.8.22 someone with the same problem? any ideas how to solve or debug this problem? -- --------------------------------------- Marek =======================================

Hi Joshua, Could you confirm if the 5 second period for learning a new audio stream is a minimum or a maximum? The unusual call flow in question results in Asterisk learning a new audio stream when we don't want it to, and having a minimum of say 2 seconds of audio would help avoid this. Thank you! On Thu, 2 Mar 2023 at 12:32, Joshua C. Colp <jcolp at sangoma.com> wrote: > On