Re: [asterisk-users] Asterisk SIP security

2008-12-11 Thread Al lists
yes, make sure context line in general area has a dummy context, something
with one line to hangup.

On Fri, Nov 28, 2008 at 12:56 PM, Steve Totaro <
stot...@totarotechnologies.com> wrote:

> On Fri, Nov 28, 2008 at 11:00 AM, Mike  wrote:
> > I was looking at my CLI the other day, and found a lot of those types of
> > messages:
> >
> >
> >
> > NOTICE[2242]: chan_sip.c:14383 handle_request_invite: Call from '' to
> > extension '000452555169' rejected because extension not found.
> >
> >
> >
> > Looking at the IP, it originated from Asia and was clearly an attempt to
> > screw with my Asterisk server.  My quick fix was simply to block the IP
> > adress at the firewall level.  So that was the end of that.
> >
> >
> >
> > What I don`t get is how the person got that far.  How could he attempt to
> > dial extensions (even though he probably was in the default context which
> > has nothing in it) when all my SIP peers are either password protected or
> > linked to a fixed IP.  And, more to the point, "Call from `` " means a
> call
> > from what exactly?  It's not one of my phones, it's not one of my
> > peers…..Shouldn't the lack of a peer be enough to block the would-be
> hacker
> > from tyring extensions?
> >
> >
> >
> > Any help is appreciate, I clearly don't understand SIP peers.
> >
> >
> >
> > Mike
> >
>
> I think if you remove context from the [general] section, you would
> not see these messages.
>
> --
> Thanks,
> Steve Totaro
> +18887771888 (Toll Free)
> +12409381212 (Cell)
> +12024369784 (Skype)
>
> ___
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Re: [asterisk-users] Asterisk SIP security

2008-11-28 Thread Steve Totaro
On Fri, Nov 28, 2008 at 11:00 AM, Mike <[EMAIL PROTECTED]> wrote:
> I was looking at my CLI the other day, and found a lot of those types of
> messages:
>
>
>
> NOTICE[2242]: chan_sip.c:14383 handle_request_invite: Call from '' to
> extension '000452555169' rejected because extension not found.
>
>
>
> Looking at the IP, it originated from Asia and was clearly an attempt to
> screw with my Asterisk server.  My quick fix was simply to block the IP
> adress at the firewall level.  So that was the end of that.
>
>
>
> What I don`t get is how the person got that far.  How could he attempt to
> dial extensions (even though he probably was in the default context which
> has nothing in it) when all my SIP peers are either password protected or
> linked to a fixed IP.  And, more to the point, "Call from `` " means a call
> from what exactly?  It's not one of my phones, it's not one of my
> peers…..Shouldn't the lack of a peer be enough to block the would-be hacker
> from tyring extensions?
>
>
>
> Any help is appreciate, I clearly don't understand SIP peers.
>
>
>
> Mike
>

I think if you remove context from the [general] section, you would
not see these messages.

-- 
Thanks,
Steve Totaro
+18887771888 (Toll Free)
+12409381212 (Cell)
+12024369784 (Skype)

___
-- Bandwidth and Colocation Provided by http://www.api-digital.com --

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users