[asterisk-bugs] [JIRA] (ASTERISK-25869) "rejected because extension not found" should be logged as a security event

Brian J. Murrell (JIRA) noreply at issues.asterisk.org
Sun Mar 27 13:45:56 CDT 2016


Brian J. Murrell created ASTERISK-25869:
-------------------------------------------

             Summary: "rejected because extension not found" should be logged as a security event
                 Key: ASTERISK-25869
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-25869
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
    Affects Versions: 13.7.1
            Reporter: Brian J. Murrell


Events such as:

{noformat}
chan_sip.c:25697 handle_request_invite: Call from '' (159.122.92.46:5076) to extension '900972598081022' rejected because extension not found in context 'inbound-anon-sip'.
{noformat}

should be logged as a security issue in the security log as it is very indicative of a cracker trying to use an unsecured Asterisk server and such crackers should be logged.




--
This message was sent by Atlassian JIRA
(v6.2#6252)



More information about the asterisk-bugs mailing list