[asterisk-users] Someone has hacked into our system

[jon pounder]

On 11/22/2010 06:44 PM, Kevin Keane wrote:
>
> Use IPTables to lock down your machine to only accept incoming 
> connections from your local network and from the particular IPs that 
> you are expecting connections from (such as your SIP trunk, maybe).
>
> That is of course assuming that these calls are made by SIP.
>
> Don't forget to also change all the passwords.
>

good point - someone can easily just dial in a pots line locally and 
dial out another one making a long distance call, assuming the dial plan 
allows this.

it doesn't have to be sip involved in any part of the problem.






> *From:* asterisk-users-bounces at lists.digium.com 
> [mailto:asterisk-users-bounces at lists.digium.com] *On Behalf Of *Gary 
> Kuznitz
> *Sent:* Monday, November 22, 2010 8:23 AM
> *To:* Asterisk Users Mailing List - Non-Commercial Discussion
> *Subject:* [asterisk-users] Someone has hacked into our system
>
> Someone has hacked into our system and is making calls overseas.
>
> How can I:
>
> 1. Find out the where the calls are originating from?
>
> 2. Block all calls that are not authorized?
>
> Our system is in the USA.
>
> Only calls from inside our LAN are allowed.
>
> Thank you,
>
> Gary Kuznitz
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20101122/3279c130/attachment.htm