[asterisk-biz] Query about Asterisk / Database / Internet Security Consultancy

[Gerrit Jacobsen]

Matthew,

> That would risk toll fraud

You misunderstood. The idea is to put a honey-trap into the wild which cannot make charged calls. Of course you must isolate it from the rest of your network.

Eventually he will anyway put the system into the wild, so better do it when there is no risk of damage.

Kind regards, / Ar cieņu, / Mit freundlichen Grüßen


Gerrit Jacobsen
Managing Director
Phone +371 6765 1010
Fax +371 6732 2010
gjacobsen at x164.com
Rigatta IT SIA
Citadeles iela 2-516
Riga, LV-1010
www.x164.com



This e-mail may contain confidential information. If you are not the intended recipient please notify the sender and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.




On 4 Apr 2013, at 18:06, Matthew J. Roth wrote:

> Gerrit Jacobsen wrote:
>> 
>> a) Connect the machine to the internet
>> ...
>> Wait for hackers to attack.
> 
> Kashif,
> 
> This is seriously bad advice.  If you're not sure how to secure the servers yourself you should not just put them on the Internet and see what happens.  That would risk toll fraud and exposing your entire network if the attackers find something you missed.
> 
> Get a qualified consultant to secure the servers, test, test, test, then connect them to the Internet.  Continue to monitor them daily for signs of intrusion or fraud.  Do not treat security as an afterthought or something to ignore until after your servers have been exploited.
> 
> Regards,
> 
> Matthew Roth
> InterMedia Marketing Systems
> Software Engineer and Systems Developer
> 
> --
> _____________________________________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
> 
> asterisk-biz mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-biz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-biz/attachments/20130404/f5ba0380/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: x164logo-small.png
Type: image/png
Size: 7242 bytes
Desc: not available
URL: <http://lists.digium.com/pipermail/asterisk-biz/attachments/20130404/f5ba0380/attachment-0001.png>