[Asterisk-biz] CID Spoofing

Gary Reuter gary.reuter at gmail.com
Wed Jul 27 17:23:29 MST 2005


My turn to jump in, just because I've been wrestling with caller id
spoofing for my own (totally legit) reasons.

> >>> Does anyone know if CID spoofing is legal ?
IANAL, but I think it is.  The ability to change the callerid on PRIs
is not new.  Impersonating someone is not legal, so displaying someone
else's telephone number without their permission/expectation can
probably get you into trouble.

> This is not a good idea for many reasons. Flipping the business model
> on its head, you really need to look at what honest purpose this would
> serve. 
The proposed business model in this thread is a type of click-to-call
service with caller-id spoofing.  For that, I cannot really think of a
legit reason for spoofing CID other than practical jokes.  As for bill
collectors, they either show their number, or block it altogether --
I've had enough call me to know! :-)

However, the requirement to 'spoof' the caller-id is quite legitimate.
 A voicemail service provider doesn't want to display the voicemail
access number but rather the customer's number when the customer uses
an instant-callback feature.  An long-distance provider wants the same
feature.

And since I'm sure the question is on alot of people's minds:  
Asterisk can spoof callerid depending on what protocal the outbound
call is using.
With the IAX providers I've used, I've been able to 'spoof' pretty
much anything to any destination, either in the dialplan or in
sip.conf for the user.
With SIP providers (using Cisco gateways), neither STABLE nor HEAD
support Remote-Party-ID for outgoing calls.  I recently started
working on a patch (still have to do proper 'screen' and 'privacy'),
and can 'spoof' the CID on outbound SIP calls also.
(If you use SER to proxy outbound calls from your asterisk server to
your SIP provider, it may be easier to have the Remote-Party-ID header
added there rather than patching chan_sip).
No experience with PRI connections (until next week anyway), but from
my understanding, Asterisk will be able to put whatever callerid
desired.



More information about the asterisk-biz mailing list