<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
On 11/22/2010 06:44 PM, Kevin Keane wrote:
<blockquote
cite="mid:B5632960467A4C48B4DBF3D2512358A74F5C679067@akechi-denki.ad.nctechcenter.com"
type="cite">
<meta http-equiv="Content-Type"
content="text/html; charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Comic Sans MS";
panose-1:3 15 7 2 3 3 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Use
IPTables to lock down your machine to only accept incoming connections
from your local network and from the particular IPs that you are
expecting connections from (such as your SIP trunk, maybe).<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">That
is of course assuming that these calls are made by SIP.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Don’t
forget to also change all the passwords.</span></p>
</div>
</blockquote>
<br>
good point - someone can easily just dial in a pots line locally and
dial out another one making a long distance call, assuming the dial
plan allows this.<br>
<br>
it doesn't have to be sip involved in any part of the problem.<br>
<br>
<br>
<br>
<br>
<br>
<br>
<blockquote
cite="mid:B5632960467A4C48B4DBF3D2512358A74F5C679067@akechi-denki.ad.nctechcenter.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p> </o:p></span></p>
<div>
<div
style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p class="MsoNormal" style="margin-left: 0.5in;"><b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span
style="font-size: 10pt; font-family: "Tahoma","sans-serif";">
<a class="moz-txt-link-abbreviated" href="mailto:asterisk-users-bounces@lists.digium.com">asterisk-users-bounces@lists.digium.com</a>
[<a class="moz-txt-link-freetext" href="mailto:asterisk-users-bounces@lists.digium.com">mailto:asterisk-users-bounces@lists.digium.com</a>] <b>On Behalf Of </b>Gary
Kuznitz <br>
<b>Sent:</b> Monday, November 22, 2010 8:23 AM<br>
<b>To:</b> Asterisk Users Mailing List - Non-Commercial Discussion<br>
<b>Subject:</b> [asterisk-users] Someone has hacked into our system<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal" style="margin-left: 0.5in;"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">Someone
has hacked into our system and is making calls overseas. </span><span
lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">How
can I:</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">1.
Find out the where the calls are originating from?</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">2.
Block all calls that are not authorized?</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">Our
system is in the USA.</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">Only
calls from inside our LAN are allowed.</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">Thank
you,</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span
style="font-size: 10pt; font-family: "Comic Sans MS";" lang="EN">Gary
Kuznitz</span><span lang="EN"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"><o:p> </o:p></span></p>
<p class="MsoNormal" style="margin-left: 0.5in;"><span lang="EN"> <o:p></o:p></span></p>
</div>
</blockquote>
<br>
</body>
</html>