Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › Vodafone New Zealand › [WXC/VFX] Asterisk Security -- ***If you Run Asterisk Please Please READ***


3594 posts

Uber Geek
+1 received by user: 79

Trusted
WorldxChange

Topic # 65912 9-Aug-2010 09:53
Send private message

With the amount of SIP hacking on the increase this is a pretty good webinar for those people that are running Asterisk Boxes,

We have seen a increase in SIP hacking attempts across NZ at the moment, it comes and goes in cycles and you would have possibly seen a few News Items about it as well ,

Whilst we take care of the certified devices on VFX, security on Open VFX and Asterisk devices is the users' responsibilty so here is a nice little webinar sent to me by my support team to share with you.

Please Asterisk users take your security seriously as getting burned can be costly for you and us and niether of us want that Cry.

If in doubt seek advice

http://www.asterisk.org/security/webinar




Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

Create new topic
Infrastructure Geek
4057 posts

Uber Geek
+1 received by user: 195

Trusted
Microsoft NZ
Subscriber

  Reply # 365276 9-Aug-2010 10:37
Send private message

i think we've seen some 2000 SIP requests bounce off our firewall in the last two weeks. Varying source IP's and varying CLI's. Well worth a second look, even if you think you're safe..




Technical Evangelist
Microsoft NZ
about.me/nzregs
Twitter: @nzregs

27476 posts

Uber Geek
+1 received by user: 6942

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 365288 9-Aug-2010 11:03
Send private message

I've seen numerous attacks looking back at logs as well.

If you're running trixbox the fail2ban script is in later distributions. You should be running this as a bare minimum. Extensions locked down to local IP ranges is also a very good idea!


 
 
 
 


BDFL - Memuneh
62244 posts

Uber Geek
+1 received by user: 12800

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 369696 19-Aug-2010 09:48
Send private message

Please note I have posted an update in this thread.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure | Business Transformation | Enterprise Content Management | Customer Relationship Management | Sharesies investment fund

Mr Snotty
8300 posts

Uber Geek
+1 received by user: 4267

Moderator
Trusted
Lifetime subscriber

  Reply # 369700 19-Aug-2010 09:53
Send private message

I'm seeing quite a few bounces off our Asterisk server too >.<




Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial



3594 posts

Uber Geek
+1 received by user: 79

Trusted
WorldxChange

  Reply # 369711 19-Aug-2010 10:27
Send private message

We will have something deployed shortly that will assist our Asterisk customers.




Yes I am a employee of WxC (My Profile) ... but I do have my own opinions as well Wink

             

https://www.facebook.com/wxccommunications

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.