<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 8/30/10 11:13 PM, Frank Griffith wrote:
<blockquote cite="mid:634979.53728.qm@web51302.mail.re2.yahoo.com"
type="cite">
<style type="text/css"><!-- DIV {margin:0px;} --></style>
<div style="font-family: times new roman,new york,times,serif;
font-size: 12pt;">
<div>Well obviously there is a remote SIP connecting. But my
server is not setup to allow any remote connections. According
to the VOIP provider I've been brute force attacked yet
Asterisk leaves no log information as to which account was
logged into. Thus I'm still stuck trying to figure out what
happened.</div>
<div> </div>
</div>
</blockquote>
Let me repeat, the fact that you have _011X. in your [default]
context proves that your Asterisk installation is an open door to
anyone to dial it from a remote location without passing
authentication, unless you have permit/deny rules to block world.<br>
<br>
Vahan<br>
</body>
</html>