[asterisk-users] Am I cracked?

[Kevin Larsen]

> OK, I set alwaysauthreject = yes and I discovered a allowguest, which I 
set
> to "no", too.
> The PBX is behind a Firewall and I just allow UDP 5060 and 10000-10100.
> Now I log the SIP-pakets coming from Internet, too...
> 
> Hopefully I solved my problem...

Make sure you have solved the problem. You don't want to get hit with a 
phone bill for calls from your location to Israel. Basically, they are 
hoping that you are running the equivalent of a mail server open relay. 
They are trying to use you to dial out to another number. You don't want 
to pay for these calls.

The calls are being dumped into your default context. It's not matching on 
your gotoif statements, so finally it is trying to execute this:
Dial("SIP/192.168.20.120-0000002a", "SIP/pbxluca/000972592603325,,R") in 
new stack

Not sure what trunk pbxluca is, but if that is an outbound trunk, then 
this is very bad. The only reason it would fail then is if they have the 
outbound dial pattern wrong, which is a sure sign that you are open in the 
future to having someone make this kind of call in a way that does work 
and leaves you on the hook. Based on your email address, I am guessing you 
are in Germany. Looks like they almost have the correct outbound pattern 
for dialing from Germany to Israel. It should be 00972592603325 (notice 
the one less zero in the front). Please tell me that pbxluca is not an 
outbound dialing context? If it is, you need to fix this very quickly.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20150608/faa77385/attachment.html>