Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




409 posts

Ultimate Geek
+1 received by user: 2

Subscriber

Topic # 112891 26-Dec-2012 11:46 Send private message

Hi all

Has anyone come up against an issue I have with the Fritzbox 7340 and DECT, which reports that incoming calls are being received that simply did not happen!

ABout once an hour, my Missed Call log reports that I have missed a call from "Unknown" that I know for sure never happened. Clearly this must be a transient signal being developed in the device and I wondered in anyone else has experienced this and resolved it.

My Fritzbox does not have a Landline connection for phone and all calls are handled by VOIP. Currently the Landline phone connection port is not used. The only "Own Telephone Number" that I have defined is to an Asterisk box, and i have confirmed that the bogus calls signals did not originate from Asterisk.

So far, the only way around this is to create a Call Block rule to ignore calls that have no Caller ID, which is a bit draconian.  Does anyone have any other ideas about how to squash the false call signals that keep appearing in the Missed Call log?

Cheers Mike


Create new topic
19414 posts

Uber Geek
+1 received by user: 1257

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 737325 26-Dec-2012 12:17 Send private message

My pick would be a bot running a SIP script attack against the device.

I'm not actually sure what protection against this the Fritz!box has, I should have a play over the next few days.



409 posts

Ultimate Geek
+1 received by user: 2

Subscriber

  Reply # 737331 26-Dec-2012 12:27 Send private message

I have observed this behaviour right from the first day I installed this Fritzbox and prior to creating any Local Numbers at all, my impression was that it had to be a local transient signal. It was the one reason that I did not enable the DECT base station originally. Now I see the benefits of the DECT base, and I wanted to leverage it.

So yes it could be a Bot although the one SIP connection I now have is internal i.e. the one connection is to my local ATCOM IP02 PBX rather to an external SIP provider.

I guess if the Missed Call log on your Fritzbox is not generating heaps of call records from an "Unknown" caller then I must have a suspect box!

Cheers Mike

19414 posts

Uber Geek
+1 received by user: 1257

Moderator
Trusted
Biddle Corp
Subscriber

  Reply # 737350 26-Dec-2012 12:53 Send private message

You don't need to have a SIP registration for a bot to me scanning your system, you merely need port 5060 to be exposed to the internet.

Bots are a massive problem these days, and are the reason why you should never ever have a port forward on port 5060 unless you fully understand the security risks of doing so. I've heard of plenty of people using the likes of 2talk, setting a port forward on their router to an SPA and then finding their phone continually giving one right as the bot script hits their ATA.

I picked up a 7390 and fritz!fon while in Aussie in August and have used it for all of an hour, I really need to have a play witrh it again before I sell it.

1960 posts

Uber Geek
+1 received by user: 306

Subscriber

  Reply # 737488 26-Dec-2012 21:00 Send private message

Does sound a lot like a bot attack.

The Frtitz will intercept all packets on 5060. But I wouldn't have thought anonymous calls would be passed on to the extensions. Havent done any captures to see what exactly is going on though to confirm anything.

202 posts

Master Geek
+1 received by user: 13


  Reply # 737508 26-Dec-2012 21:53 Send private message

delayed/broken sip signalling?

10933 posts

Uber Geek
+1 received by user: 469

Trusted
Subscriber

  Reply # 737518 26-Dec-2012 22:19 Send private message

Not happened for me, and I have several italk and 2talk lines configured on my fritzbox




Richard rich.ms



409 posts

Ultimate Geek
+1 received by user: 2

Subscriber

  Reply # 737529 26-Dec-2012 23:27 Send private message

So, would you say a reload of the latest firmware would be the next most useful step?

Cheers Mike

202 posts

Master Geek
+1 received by user: 13


  Reply # 737723 27-Dec-2012 15:30 Send private message

ring your isp

3558 posts

Uber Geek
+1 received by user: 60

Trusted
WorldxChange

  Reply # 737736 27-Dec-2012 16:39 Send private message

kornflake: ring your isp


Why ?




Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

202 posts

Master Geek
+1 received by user: 13


  Reply # 737742 27-Dec-2012 16:45 Send private message

fair point, if it is delayed signalling and the person sip is with third party not alot the isp can/will do about it

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Warning: Rage Ahead - Campbell Live and childhood poverty
Created by kawaii, last reply by networkn on 2-Sep-2014 19:57 (112 replies)
Pages... 6 7 8


Does NZ need better gun laws?
Created by mattwnz, last reply by heylinb4nz on 2-Sep-2014 16:23 (104 replies)
Pages... 5 6 7


What tyre brand/model to look at ?
Created by Mark, last reply by Mark on 2-Sep-2014 21:16 (34 replies)
Pages... 2 3


VideoEZY OnDemand
Created by Andib, last reply by davidcole on 2-Sep-2014 20:10 (63 replies)
Pages... 3 4 5


Judith Collins: I am resigning
Created by Presso, last reply by gzt on 2-Sep-2014 11:42 (109 replies)
Pages... 6 7 8


Cirque du Soleil Cellphone Hijack
Created by myopinion, last reply by PhantomNVD on 1-Sep-2014 18:01 (21 replies)
Pages... 2


Orcon Global Mode launched
Created by freitasm, last reply by shk292 on 1-Sep-2014 11:32 (132 replies)
Pages... 7 8 9


Lightbox press event release
Created by freitasm, last reply by IcI on 30-Aug-2014 17:54 (562 replies)
Pages... 36 37 38



Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.