[asterisk-users] Am I cracked?

[Steve Edwards]

On Mon, 8 Jun 2015, Luca Bertoncello wrote:

> This is not really possible, since I'll login on my Asterisk from many 
> Providers...

 	many < all

So make a list of the 100 or so providers you have active accounts with. 
It's still way less than 'all.'

Also, I'm willing to bet you won't be using providers from China, North 
Korea, Russia, Iraq, etc, etc, etc. (Sorry if that steps on anybody's 
toes.)

Look for address blocks (class A, B, C) that are allocated to geographic 
regions you do not have any providers. If you limit your 'attack surface' 
you make your security problem manageable.

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000