Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



3551 posts

Uber Geek
+1 received by user: 60

Trusted
WorldxChange

Topic # 65912 9-Aug-2010 09:53 Send private message

With the amount of SIP hacking on the increase this is a pretty good webinar for those people that are running Asterisk Boxes,

We have seen a increase in SIP hacking attempts across NZ at the moment, it comes and goes in cycles and you would have possibly seen a few News Items about it as well ,

Whilst we take care of the certified devices on VFX, security on Open VFX and Asterisk devices is the users' responsibilty so here is a nice little webinar sent to me by my support team to share with you.

Please Asterisk users take your security seriously as getting burned can be costly for you and us and niether of us want that Cry.

If in doubt seek advice

http://www.asterisk.org/security/webinar







Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

Create new topic
Infrastructure Geek
3505 posts

Uber Geek
+1 received by user: 52

Trusted
Microsoft NZ
Subscriber

  Reply # 365276 9-Aug-2010 10:37 Send private message

i think we've seen some 2000 SIP requests bounce off our firewall in the last two weeks. Varying source IP's and varying CLI's. Well worth a second look, even if you think you're safe..




Infrastructure Technical Evangelist
Microsoft NZ
about.me/nzregs
twitter.com/nzregs


18541 posts

Uber Geek
+1 received by user: 729

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 365288 9-Aug-2010 11:03 Send private message

I've seen numerous attacks looking back at logs as well.

If you're running trixbox the fail2ban script is in later distributions. You should be running this as a bare minimum. Extensions locked down to local IP ranges is also a very good idea!


BDFL
47930 posts

Uber Geek
+1 received by user: 3540

Administrator
Trusted
Geekzone
Subscriber

  Reply # 369696 19-Aug-2010 09:48 Send private message

Please note I have posted an update in this thread.






Gettin' down on Friday
2647 posts

Uber Geek
+1 received by user: 339

Trusted
Think Concepts
Subscriber

  Reply # 369700 19-Aug-2010 09:53 Send private message

I'm seeing quite a few bounces off our Asterisk server too >.<




Michael Murphy
[Twitter] [Last.fm] [IPv6 Sage]

Everything I say here is my own opinion and not that of my employer Think Concepts.





3551 posts

Uber Geek
+1 received by user: 60

Trusted
WorldxChange

  Reply # 369711 19-Aug-2010 10:27 Send private message

We will have something deployed shortly that will assist our Asterisk customers.




Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

Create new topic








Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when new jobs are posted to our jobs board:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Forms of government for New Zealand
Created by charsleysa, last reply by JimmyH on 20-Apr-2014 15:25 (117 replies)
Pages... 6 7 8


MH370 - Call for Search & Rescue Help
Created by DS248, last reply by Sideface on 17-Apr-2014 17:28 (735 replies)
Pages... 47 48 49


why does the tax payer have to pay for the prince and princess' 6 star holiday?
Created by joker97, last reply by Geektastic on 17-Apr-2014 15:49 (67 replies)
Pages... 3 4 5


galaxy s4 now on 4.4.2
Created by nzrock, last reply by jeffnz on 20-Apr-2014 14:10 (59 replies)
Pages... 2 3 4


Whats the best wife friendly media centre?
Created by amorpeth, last reply by jonolynn on 19-Apr-2014 20:20 (14 replies)

Snap suffering Trans-Tasman congestion 18/04?
Created by Lias, last reply by NonprayingMantis on 19-Apr-2014 00:05 (26 replies)
Pages... 2


Help ! Home business connection and VDSL dead. yikes.
Created by Scotsman, last reply by Scotsman on 17-Apr-2014 21:10 (26 replies)
Pages... 2


TVNZ on Demand Jailbreak Detection
Created by TranceManNZ, last reply by hio77 on 18-Apr-2014 20:25 (12 replies)


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.