Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1081 posts

Uber Geek


# 78228 1-Mar-2011 19:02
Send private message

Friends are on 2Talk and for ages they have been getting silent calls and the caller ID shows up as 'caller unknown' or 'out of area'. It is nearly always in the middle of the night, so they have taken to removing the batteries from their phone at night.
If they don't answer the call the phone reports missed calls from 'Asterisk'.
It seems to me it is probably 2Talk's fault? Any other ideas?
Thanks, John

Create new topic
28425 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  # 444531 1-Mar-2011 19:05
Send private message

It's just one of many hacking attempts trying SIP URI calls against VoIP devices and has nothing to do with 2talk. It's just a script trying to make calls via insecure PBX's, and because your device allows unauthenticated URI calls the phone rings.

Assuming you are using a Linksys ATA this should always have "Restrict Source IP" set to "yes", however I believe this may prevent some inbound calls on 2talk based upon what people have told me from my blog post about Linksys configurations. Full details of what this feature does are in my blog post.

28425 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  # 444534 1-Mar-2011 19:12
Send private message

I'm guessing they also possibly have port forwarding on 5060 enabled. Removing this may prevent the issuse as most NAT firewall should only allow inbound traffic through the pinhole from the IP that the outbound request (ie SIP registration) was sent to.

 
 
 
 




1081 posts

Uber Geek


  # 445002 2-Mar-2011 22:26
Send private message

Thanks for responding. It is a Grandstream Handytone 486 (or clone) device connected directly to their cable modem, and serving as a router for a single PC. I don#t see any option for restricting the incoming caller IP address. It isn't behind a firewall obviously, but I note that "local SIP port" is set to 5060. It has the option for 'use random port', would that make any difference?
It does have the option for an "authenticate password" though.
Unfortunatelly the HT-486 doesn't seem to have uPnP either.
Thanks.

28425 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  # 445047 3-Mar-2011 06:14
Send private message

There isn't much you can do in this case. These are a horrible quality device anyway, my recommendation would be to install a router and/or better hardware such as a Linksys SPA ATA or all in one unit such as a WRP400 or SPA521.

Just be aware that a SPA2102 or similar is no good as a router as the maximum routing speeds are ~7Mbps which is 1/2 of the speed of the cable modem connecttion.

Dangerous Chocolate
173 posts

Master Geek

Subscriber

  # 445064 3-Mar-2011 08:33
Send private message

Skolink: Friends are on 2Talk and for ages they have been getting silent calls and the caller ID shows up as 'caller unknown' or 'out of area'. It is nearly always in the middle of the night, so they have taken to removing the batteries from their phone at night.
If they don't answer the call the phone reports missed calls from 'Asterisk'.
It seems to me it is probably 2Talk's fault? Any other ideas?
Thanks, John


I get several of these a week also on my asterisk box - probably because I have "Allow anonymous inbound SIP calls" to Yes. If I set this to No, I lose connectivity to WXC - I understand this should not be the case, however have not managed to troubleshoot why yet

I'll answer and try to talk with them, as I figure if they have gone to so much trouble they may as well have a conversation with me :-) but no-one ever talks back.

Cheers

28425 posts

Uber Geek

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  # 445067 3-Mar-2011 08:42
Send private message

Virgil:
Skolink: Friends are on 2Talk and for ages they have been getting silent calls and the caller ID shows up as 'caller unknown' or 'out of area'. It is nearly always in the middle of the night, so they have taken to removing the batteries from their phone at night.
If they don't answer the call the phone reports missed calls from 'Asterisk'.
It seems to me it is probably 2Talk's fault? Any other ideas?
Thanks, John


I get several of these a week also on my asterisk box - probably because I have "Allow anonymous inbound SIP calls" to Yes. If I set this to No, I lose connectivity to WXC - I understand this should not be the case, however have not managed to troubleshoot why yet

I'll answer and try to talk with them, as I figure if they have gone to so much trouble they may as well have a conversation with me :-) but no-one ever talks back.

Cheers


Under absolutely NO circumstances should this ever be set to Yes. The fact you need this set to yes means your trunk settings are configured incorrectly and your box is wide open to the world. If you have any insecurities in your inbound call routing it's not a matter of if, but when, your box will be hacked and used for call relaying.

The correct settings are available here in the WxC forums.




1081 posts

Uber Geek


  # 445090 3-Mar-2011 10:07
Send private message

sbiddle: There isn't much you can do in this case. These are a horrible quality device anyway, my recommendation would be to install a router and/or better hardware such as a Linksys SPA ATA or all in one unit such as a WRP400 or SPA521.
 
I set the 'local port' to random, and last night there were no calls from any Gauls. Here's hoping...

sbiddle: Just be aware that a SPA2102 or similar is no good as a router as the maximum routing speeds are ~7Mbps which is 1/2 of the speed of the cable modem connecttion.

Really? I regret recommending the SPA2102 to a friend now, for use as a router and VoIP. I don't think they use their internet very heavily anyway. That might also explain why the internet is so slow at the friends' who have the HT-486. I thought maybe Wellington cable was prone to overloading in the evenings, compared to Chch. Speed tests on the '15 Mbps' connection gave a maximum of only about 4Mbps.

Will do a test tonight with and without the HT-486.

 
 
 
 




1081 posts

Uber Geek


  # 462943 27-Apr-2011 11:26
Send private message

Almost 2 months later and I'm pleased to say that the settings change did the trick. No more silent anonymous 'calls', or missed calls from 'Asterisk'.

Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Samsung Galaxy Fold now available in New Zealand
Posted 6-Dec-2019 00:01


NZ company oDocs awarded US$ 100,000 Dubai World Expo grant
Posted 5-Dec-2019 16:00


New Zealand Rugby Selects AWS-Powered Analytics for Deeper Game Insights
Posted 5-Dec-2019 11:33


IMAGR and Farro bring checkout-less supermarket shopping to New Zealand
Posted 5-Dec-2019 09:07


Wellington Airport becomes first 5G connected airport in the country
Posted 3-Dec-2019 08:42


MetService secures Al Jazeera as a new weather client
Posted 28-Nov-2019 09:40


NZ a top 10 connected nation with stage one of ultra-fast broadband roll-out completed
Posted 24-Nov-2019 14:15


Microsoft Translator understands te reo Māori
Posted 22-Nov-2019 08:46


Chorus to launch Hyperfibre service
Posted 18-Nov-2019 15:00


Microsoft launches first Experience Center worldwide for Asia Pacific in Singapore
Posted 13-Nov-2019 13:08


Disney+ comes to LG Smart TVs
Posted 13-Nov-2019 12:55


Spark launches new wireless broadband "Unplan Metro"
Posted 11-Nov-2019 08:19


Malwarebytes overhauls flagship product with new UI, faster engine and lighter footprint
Posted 6-Nov-2019 11:48


CarbonClick launches into Digital Marketplaces
Posted 6-Nov-2019 11:42


Kordia offers Microsoft Azure Peering Service
Posted 6-Nov-2019 11:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.