[asterisk-users] Intruder

[Michael L. Young]

----- Original Message ----- 

> From: "Felix Vazquez" <felix.vazquez at theboshgroup.com>
> To: asterisk-users at lists.digium.com
> Sent: Friday, November 16, 2012 11:20:46 AM
> Subject: [asterisk-users] Intruder

> I am in the asterisk CLI and can see an unidentified caller trying
> the make calls out of the asterisk system. How do I stop them? How
> do I identify them and how can I see how the go in?

> This is an example of what I would see:

> NOTICE[4098]: chan_sip.c:20063 handle_request_invite: Call from '' to
> extension '90111235551212' rejected because extension not found.

I would recommend you read README-SERIOUSLY.bestpractices.txt, top level of source code.

Another thing you can do is turn on security logging if you are using Asterisk 10/11.  Take a look at logger.conf.  It may provide you with some extra information on who is trying to make the call.

Take a look at this page:
https://wiki.asterisk.org/wiki/display/AST/Important+Security+Considerations

I would recommend using fail2ban as well.

Michael
(elguero)