Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




410 posts

Ultimate Geek
+1 received by user: 2

Subscriber

Topic # 112891 26-Dec-2012 11:46 Send private message

Hi all

Has anyone come up against an issue I have with the Fritzbox 7340 and DECT, which reports that incoming calls are being received that simply did not happen!

ABout once an hour, my Missed Call log reports that I have missed a call from "Unknown" that I know for sure never happened. Clearly this must be a transient signal being developed in the device and I wondered in anyone else has experienced this and resolved it.

My Fritzbox does not have a Landline connection for phone and all calls are handled by VOIP. Currently the Landline phone connection port is not used. The only "Own Telephone Number" that I have defined is to an Asterisk box, and i have confirmed that the bogus calls signals did not originate from Asterisk.

So far, the only way around this is to create a Call Block rule to ignore calls that have no Caller ID, which is a bit draconian.  Does anyone have any other ideas about how to squash the false call signals that keep appearing in the Missed Call log?

Cheers Mike


Create new topic
19781 posts

Uber Geek
+1 received by user: 1517

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 737325 26-Dec-2012 12:17 Send private message

My pick would be a bot running a SIP script attack against the device.

I'm not actually sure what protection against this the Fritz!box has, I should have a play over the next few days.



410 posts

Ultimate Geek
+1 received by user: 2

Subscriber

  Reply # 737331 26-Dec-2012 12:27 Send private message

I have observed this behaviour right from the first day I installed this Fritzbox and prior to creating any Local Numbers at all, my impression was that it had to be a local transient signal. It was the one reason that I did not enable the DECT base station originally. Now I see the benefits of the DECT base, and I wanted to leverage it.

So yes it could be a Bot although the one SIP connection I now have is internal i.e. the one connection is to my local ATCOM IP02 PBX rather to an external SIP provider.

I guess if the Missed Call log on your Fritzbox is not generating heaps of call records from an "Unknown" caller then I must have a suspect box!

Cheers Mike

19781 posts

Uber Geek
+1 received by user: 1517

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 737350 26-Dec-2012 12:53 Send private message

You don't need to have a SIP registration for a bot to me scanning your system, you merely need port 5060 to be exposed to the internet.

Bots are a massive problem these days, and are the reason why you should never ever have a port forward on port 5060 unless you fully understand the security risks of doing so. I've heard of plenty of people using the likes of 2talk, setting a port forward on their router to an SPA and then finding their phone continually giving one right as the bot script hits their ATA.

I picked up a 7390 and fritz!fon while in Aussie in August and have used it for all of an hour, I really need to have a play witrh it again before I sell it.

2027 posts

Uber Geek
+1 received by user: 333

Subscriber

  Reply # 737488 26-Dec-2012 21:00 Send private message

Does sound a lot like a bot attack.

The Frtitz will intercept all packets on 5060. But I wouldn't have thought anonymous calls would be passed on to the extensions. Havent done any captures to see what exactly is going on though to confirm anything.

206 posts

Master Geek
+1 received by user: 13


  Reply # 737508 26-Dec-2012 21:53 Send private message

delayed/broken sip signalling?

11125 posts

Uber Geek
+1 received by user: 551

Trusted
Subscriber

  Reply # 737518 26-Dec-2012 22:19 Send private message

Not happened for me, and I have several italk and 2talk lines configured on my fritzbox




Richard rich.ms



410 posts

Ultimate Geek
+1 received by user: 2

Subscriber

  Reply # 737529 26-Dec-2012 23:27 Send private message

So, would you say a reload of the latest firmware would be the next most useful step?

Cheers Mike

206 posts

Master Geek
+1 received by user: 13


  Reply # 737723 27-Dec-2012 15:30 Send private message

ring your isp

3558 posts

Uber Geek
+1 received by user: 60

Trusted
WorldxChange

  Reply # 737736 27-Dec-2012 16:39 Send private message

kornflake: ring your isp


Why ?




Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

206 posts

Master Geek
+1 received by user: 13


  Reply # 737742 27-Dec-2012 16:45 Send private message

fair point, if it is delayed signalling and the person sip is with third party not alot the isp can/will do about it

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

Speed limit when overtaking? Teach me please.
Created by nakedmolerat, last reply by hio77 on 23-Oct-2014 23:34 (19 replies)
Pages... 2


Spark Socialiser
Created by freitasm, last reply by freitasm on 22-Oct-2014 18:39 (34 replies)
Pages... 2 3


American legal jurisdiction in New Zealand
Created by ajobbins, last reply by gzt on 21-Oct-2014 14:58 (30 replies)
Pages... 2


iPad Air 2 and iPad Mini 3. Gonna get one?
Created by Dingbatt, last reply by eracode on 24-Oct-2014 05:17 (102 replies)
Pages... 5 6 7


Snap have failed our company!
Created by dafman, last reply by kornflake on 23-Oct-2014 17:41 (37 replies)
Pages... 2 3


Thief taunts 12 year old via stolen laptop
Created by macuser, last reply by charsleysa on 22-Oct-2014 23:49 (12 replies)

Another Trade Me competitor: SellShed
Created by freitasm, last reply by freitasm on 23-Oct-2014 19:00 (44 replies)
Pages... 2 3


22nd Only: PB Tech BROTHER HL1110 Mono laser Printer $15 shipped(after $30 cashback)
Created by loceff13, last reply by loceff13 on 23-Oct-2014 08:55 (23 replies)
Pages... 2



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.