Re: [asterisk-users] Block Spam Calls

2019-12-12 Thread Adam Goldberg
This is exactly what I do - “press 1 for a human”
Works great


From: asterisk-users  on behalf of 
Greg Woods 
Sent: Thursday, December 12, 2019 6:34 PM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Block Spam Calls

Most spam calls are robocalls these days. At my house, I can block pretty much 
all of the robocalls by requiring the caller to take some action before ringing 
the phones. In our case, the action is just to dial 1 for my wife or 2 for me. 
The only difference it makes in the end is which voice mailbox the caller gets 
transferred to if no one answers, but since asterisk so programmable, there are 
a lot of ways to accomplish the basic concept. I can see tons of calls in my 
log that never get through to bother us.

--Greg


On Tue, Dec 10, 2019 at 8:58 AM Alexander Perkins 
mailto:alexanderhenryperk...@gmail.com>> wrote:
Hi All.  Does anybody know if Google/Android has an API I can sign up for that 
will allow us to query the caller ID and find out if it is spam or a 
robocaller?  I ask because we've had increase in spam calls and I'd like to 
simply play dead air or something really annoying.

Thanks all,
Alex
--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Freepbx / Asterisk PJsip multipe devices

2019-02-06 Thread Adam Goldberg
I think the question was "how do I do this with FreePBX", and a dialplan 
suggestion is likely difficult to do that way.

I use groups: each phone has a different extension number (e.g., 601, 602, 
etc), and I created a dial group (600) which contains the phones' extensions.  
Then, a caller merely needs to dial 600 and it'll ring at several places.  I'll 
leave it as an exercise for the reader to figure out how to dial from extension 
601 but supply callerid = 600.



-Original Message-
From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On Behalf 
Of Mitch Claborn
Sent: Wednesday, February 06, 2019 9:42 AM
To: asterisk-users@lists.digium.com
Subject: Re: [asterisk-users] Freepbx / Asterisk PJsip multipe devices

Eric sent you a link of how to do it at the PJSIP level.  To do it in the dial 
plan, something like

exten => _6XXX,1,Dial(PJSIP/SoftPhone/HardwarePhone)


Mitch

On 2/6/19 8:32 AM, basti wrote:
> that was my first idea.
> 
> and how should an other user know which number he should dial?
> 
> user a: soft phone extension 100
>   hardware phone extension 101
> 
> 
> On 06.02.19 15:25, Mitch Claborn wrote:
>> You can do this in the dial plan. Register the devices separately and 
>> include both addresses in the Dial() command.
>>
>>
>> Mitch
>>
>> On 2/6/19 8:16 AM, basti wrote:
>>> In other words.
>>>
>>> I there a way that both phones are ring with only one extension?
>>>
>>> On 06.02.19 15:05, basti wrote:
 both phones are in the same net.
 when the soft phone is shut down, on hardware phone only an led is 
 flashing to show an incoming call but no sound.

 both phones use the same extension. that is the reason why I use pjsip.

 On 06.02.19 14:59, Antony Stone wrote:
> On Wednesday 06 February 2019 at 13:54:44, Mark Wiater wrote:
>
>> These two phones are not using the same extension, are they?
>
> If you shut down the softphone, does the hardware phone then ring?
>
>
> Antony.
>
>> On 2/6/2019 8:49 AM, basti wrote:
>>> both phones are registered. and the hardware phone can also make 
>>> calls.
>>> but an incoming call is not displayed and also not hearing.
>>>
>>> Call Waiting is also disabled.
>>>
>>> On 06.02.19 14:07, Cyril Alberts wrote:
 Hi,
 look at your registrations, is the hardware phone registered?
 if yes, which phone vendor do you want to connect? can you make 
 outgoing calls with hardwarephone?

 BR Cyril

 Am Mittwoch, den 06.02.2019, 13:00 +0100 schrieb basti:
> Hello,
>
> I have some user that had have a hardwarephone and an 
> softphone. I use pjsip driver and set "Max Contacts = 2" to 
> have register both at the same time.
>
> But Only the softphone is ring. the hardware phone is mute.
>
> How can i fix this?
>

>>>
>>
> 

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users
-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] OT: Explain where mailing list bouncing comes from ?

2017-06-16 Thread Adam Goldberg
I believe that Digium is using Mailman already (hence the in-the-clear monthly 
password reminders).  I suggest that whoever administers the Mailman system 
should probably be able to tell why Gmail is bouncing (sometimes), and if not, 
there's plenty of active Mailman help available:

Mailman-Users mailing list mailman-us...@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3


Adam Goldberg
AGP, LLC
+1-202-507-9900

-Original Message-
From: asterisk-users-boun...@lists.digium.com 
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Dave Platt
Sent: Friday, June 16, 2017 1:34 PM
To: asterisk-users@lists.digium.com
Subject: Re: [asterisk-users] OT: Explain where mailing list bouncing comes 
from ?

I'm not sure of the precise specifics of how Digium runs the list, but this 
sort of problem has been a "known issue" with mailing list distributions ever 
since SPF and similar technologies showed up, almost a decade ago.  DomainKeys 
and DMARC makes it more of an issue, but the overall problem is not new.

I had to switch mailing-list packages (from Majordomo to GNU Mailman) for the 
lists I run, and configure Mailman properly to avoid the worst of the problem.

In my experience, the problems affect mailing lists where:

-  The mailing list software retransmits an incoming message to
   subscribers, using the same sender address (in the SMTP
   transaction and/or message headers) that the original sender used.

and

-  The sending domain has some sort of anti-forgery technology in
   place - either SPF or DomainKeys can trigger the problem.

When such a message is retransmitted, one of several things can happen when it 
hits a mail server that does anti-spoofing enforcement:

(1) "Hmmm.  This message says it comes from j...@example.com, but the
example.com domain has an SPF record which says that only the
following five IP addresses are authorized mailers for this domain,
and suggests a policy of 'reject' for other IP addresses.  This
message is coming from an IP address which isn't on that list.
Reject it."

or

(2) "Hmmm.  This message says it comes from j...@example.com.  It has
a DomainKeys signature from that domain, which covers the sender ID,
subject, and message body.  The signature doesn't match" [sotto
voce, the Subject header was modified by the mailing list software
to include the group name] "and example.com suggests rejecting
messages which say they're from example.com but have bad signature.
Reject it."

There are almost certainly other, similar scenarios.

As a result, messages of this sort will tend to "bounce" from hosts that 
implement forgery protection, and the mailing-list software will often react to 
a flurry of such bounces by unsubscribing the intended recipient from the list.

None of the workarounds for this are perfect - they all have side effects.

[A] Recipients who are being unsubscribed because gmail (e.g.) is
bouncing such messages, can change their subscription to the
mailing list to "daily digest".  Mailman (and I believe most other
mailing list packages) send out digests as new messages, with their
own domain as the return address, thus avoiding the problems.

[B] For SPF, the mailing list software can be configured to "take
ownership" of the message... rewriting the sender address into a new
form which doesn't break SPF rules.  Examples for a message from
j...@example.com might be

   Joe at example.com via Foobar mailing list <foo...@mailer.com>
   Joe <joe-at-example-dot-...@rewritten.mailer.com>

and so forth.

GNU Mailman has the ability to do something along the lines of the
first example.  It's the configuration I use on the small mailing
list I run.  I believe it also adds a Reply-To: header to the
message to "point back to" the original sender.

It's possible to rewrite/substitute the message used in the SMTP
session, but leave the original sender's address intact in the
message headers.  This will be acceptable to many (but not all)
systems that check SPF.

[C] For DomainKeys... well, if the mailing list software is going to
make any changes at all to the headers on messages it's relaying,
or change the message body at all, it should strip out any
DomainKeys signature that might exist on the message.

Or, it can send the whole inbound message (unmodified) as a MIME
attachment within a new message it originates.  This leaves the
signature intact, but can be hard for many mail programs to handle
gracefully.


It would be up to Digium to do [B] and [C] for the mailing lists, if they so 
choose.

Individual subscribers can do [A] to reduce the risk that they'll be 
unsubscribed from the list whenever an SPF-protected message is sent through 
the list.


--
_

Re: [asterisk-users] How to detect fake CallerID? (8xx?)

2017-05-11 Thread Adam Goldberg
Seems like this is the best idea (challenge-response), a callback.  No matter 
the callerid, you don't know where the caller is.  But if you place a call BACK 
to the callerid, it's going to go to the destination.  Then you either need the 
phone to be answered, or the phone to be answered and and the challenge entered.


Adam Goldberg
AGP, LLC
+1-202-507-9900

-Original Message-
From: asterisk-users-boun...@lists.digium.com 
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of J Montoya or A J 
Stiles
Sent: Thursday, May 11, 2017 7:48 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion 
<asterisk-users@lists.digium.com>
Subject: Re: [asterisk-users] How to detect fake CallerID? (8xx?)

On Wednesday 10 May 2017, Steve Edwards wrote:
> On Wed, 10 May 2017, J Montoya or A J Stiles wrote:
> > Presumably your staff carry mobile phones.  What about an app that 
> > gets the ID of the cell tower to which it is connected, and passes 
> > it and the SIM number in a HTTP request to a server you control?
> 
> The problem is that they are supposed to use the 'site landline' to 
> confirm presence -- not their cell phone with the spoofed CID.

Yes; but the whole point is that the caller ID from the site landline is no 
longer reliable enough as evidence, by itself, that somebody is actually there.

A custom app could read the ID of the cell tower to which it was connected -- 
or even the phone's GPS co-ordinates -- and transmit that back to base over the 
Internet.  Preferrably with some sort of precautions to make the request harder 
to forge  (i.e., *not* just a plain HTTP GET with the MCC, MNC, LAC and CID in 
the query string).  If your app makes its connection via the site's wi- fi  
(which will require the co-operation of the client)  as opposed to the mobile 
network, so much the better, as there will be an IP address against which you 
can match.


If you insist to use the site landline for your authentication, you could 
extend the protocol to a full challenge-and-response as follows:  Play a series 
of digits down the line to the caller, return the call as soon as they hang up, 
and ask them to dial the same digits they just heard.  All this can be done in 
the dialplan  (you might need to record some announcements of your own, such as 
"Please memorise the following digits" and "Please dial the digits you heard in 
the last call").  

Intercepting incoming calls *to* a number is much harder  (usually requiring 
the co-operation of telcos, unless the interloper has access to some equipment 
through which they know that the call will be routed; that potentially includes 
your Asterisk, but any tampering there would be evident)  than falsifying 
outgoing calls *from* a number.  


It would be much more fun to mount a "sting" operation to catch the 
perpetrators red-handed   (say, falsely set off a fire alarm while you know 
they 
are slacking off down the pub instead of looking after the site like they are 
paid for)  .  but maybe I have just been watching too many detective dramas 
on TV!

--
JM

Note:  Originating address only accepts e-mail from list!  If replying off- 
list, change address to asterisk1list at earthshod dot co dot uk .

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [asterisk-users] How to detect fake CallerID? (8xx?)

2017-05-10 Thread Adam Goldberg
It's approximately impossible with current infrastructure.

https://transition.fcc.gov/cgb/Robocall-Strike-Force-Final-Report.pdf



Adam Goldberg
AGP, LLC
+1-202-507-9900

-Original Message-
From: asterisk-users-boun...@lists.digium.com 
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Doug Lytle
Sent: Wednesday, May 10, 2017 11:24 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion 
<asterisk-users@lists.digium.com>
Subject: Re: [asterisk-users] How to detect fake CallerID? (8xx?)

>>> I ask my SIP provider to include more headers to show the real ANI? 
>>> What would that service be called?

If it's anything like a PRI provider, I've been told they only way to get true 
CID, in those instances, would be to provide a 1-800 number (US) for them to 
call. Then you'd get correct CID, since you're paying for both legs of the call.

I do not know if this holds true for a SIP provider,

Doug

--
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

-- 
_
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

Check out the new Asterisk community forum at: https://community.asterisk.org/

New to Asterisk? Start here:
  https://wiki.asterisk.org/wiki/display/AST/Getting+Started

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users