Re: [asterisk-users] getting invites to rtp ports ??

IP is the wrong approach (whack-a-mole). You should > >>>>> consider a more comprehensive approach to securing your VoIP > >>>>> environment. Have a look at this wiki: > >>>>> > >>>>> https://www.voip-info.org/asterisk-security/

Re: [asterisk-users] getting invites to rtp ports ??

: [asterisk-users] getting invites to rtp ports ?? On Wed, Aug 29, 2018 at 6:20 PM Telium Support Group mailto:supp...@telium.ca> > wrote: Depending on log trolling (Asterisk security log) misses a lot, and also depends on the SIP/PJSIP folks to not change message structure (whi

Re: [asterisk-users] getting invites to rtp ports ??

-users-boun...@lists.digium.com] On Behalf Of sean darcy Sent: Wednesday, August 29, 2018 6:33 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 11:59 AM, Telium Support Group wrote: Block a single IP is the wrong approach (whack-a

Re: [asterisk-users] getting invites to rtp ports ??

happens, that would be worth some > additional discussion. If anything, the events can be a bit chatty... > > > > > > -Original Message- > > From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On > Behalf Of sean darcy > > Sent: Wedne

Re: [asterisk-users] getting invites to rtp ports ??

o fires off AMI events (and ARI events, IIRC). > > > > If, for whatever reason, you do not get a SECURITY log message or a > corresponding event when something 'bad' happens, that would be worth some > additional discussion. If anything, the events can be a bit chatty... > > > > > &g

Re: [asterisk-users] getting invites to rtp ports ??

On Wed, Aug 29, 2018 at 10:52 PM, Matthew Jordan wrote: > > On Wed, Aug 29, 2018 at 6:20 PM Telium Support Group > wrote: > >> Depending on log trolling (Asterisk security log) misses a lot, and also >> depends on the SIP/PJSIP folks to not change message structure (which has >> already happened

Re: [asterisk-users] getting invites to rtp ports ??

um: 30.08.18 12:04 (GMT+02:00) An: Asterisk Users Mailing List - Non-Commercial Discussion Betreff: Re: [asterisk-users] getting invites to rtp ports ?? Regarding this thread, I was wondering, why would anybody opens his firewall (for incoming traffic), for anybody else, besides his own SIP-provide

Re: [asterisk-users] getting invites to rtp ports ??

on my asterisk machine > firewall is closed except the (few) IP adresses my SIP provider told me > > Norbert > > Ursprüngliche Nachricht > Von: aster...@a-domani.nl > Datum: 30.08.18 12:04 (GMT+02:00) > An: Asterisk Users Mailing List - Non-Commerci

Re: [asterisk-users] getting invites to rtp ports ??

n-Commercial Discussion Betreff: Re: [asterisk-users] getting invites to rtp ports ?? Regarding this thread, I was wondering, why would anybody opens his firewall (for incoming traffic), for anybody else, besides his own SIP-provider? Isn't that the proper way for having your firewall co

Re: [asterisk-users] getting invites to rtp ports ??

igium.com] On Behalf Of sean darcy Sent: Wednesday, August 29, 2018 6:33 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 11:59 AM, Telium Support Group wrote: Block a single IP is the wrong approach (whack-a-mole). You should consi

Re: [asterisk-users] getting invites to rtp ports ??

> > > -Original Message- > From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On > Behalf Of sean darcy > Sent: Wednesday, August 29, 2018 6:33 PM > To: asterisk-users@lists.digium.com > Subject: Re: [asterisk-users] getting invites to r

Re: [asterisk-users] getting invites to rtp ports ??

gt; Behalf Of sean darcy > Sent: Wednesday, August 29, 2018 6:33 PM > To: asterisk-users@lists.digium.com > Subject: Re: [asterisk-users] getting invites to rtp ports ?? > > On 08/29/2018 11:59 AM, Telium Support Group wrote: > > Block a single IP is the wrong approach (whack-a-mole)

Re: [asterisk-users] getting invites to rtp ports ??

an / log trolling as a security system: > >> http://forums.asterisk.org/viewtopic.php?p=159984 > >> > >> > >> -Original Message- > >> From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On > >> Behalf Of sean darcy >

Re: [asterisk-users] getting invites to rtp ports ??

:33 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 11:59 AM, Telium Support Group wrote: Block a single IP is the wrong approach (whack-a-mole). You should consider a more comprehensive approach to securing your VoIP environment

Re: [asterisk-users] getting invites to rtp ports ??

Sent: Wednesday, August 29, 2018 6:33 PM > To: asterisk-users@lists.digium.com > Subject: Re: [asterisk-users] getting invites to rtp ports ?? > > On 08/29/2018 11:59 AM, Telium Support Group wrote: > > Block a single IP is the wrong approach (whack-a-mole). You should > > con

Re: [asterisk-users] getting invites to rtp ports ??

: Wednesday, August 29, 2018 6:33 PM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 11:59 AM, Telium Support Group wrote: > Block a single IP is the wrong approach (whack-a-mole). You should consider > a more comprehensive ap

Re: [asterisk-users] getting invites to rtp ports ??

- From: asterisk-users [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of sean darcy Sent: Wednesday, August 29, 2018 10:46 AM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 09:42 AM, Carlos Rojas wrote: Hi Probably

Re: [asterisk-users] getting invites to rtp ports ??

...@lists.digium.com] On Behalf Of sean darcy Sent: Wednesday, August 29, 2018 10:46 AM To: asterisk-users@lists.digium.com Subject: Re: [asterisk-users] getting invites to rtp ports ?? On 08/29/2018 09:42 AM, Carlos Rojas wrote: > Hi > > Probably somebody is trying to hack your system, y

Re: [asterisk-users] getting invites to rtp ports ??

On 08/29/2018 09:42 AM, Carlos Rojas wrote: Hi Probably somebody is trying to hack your system, you should block that ip on your firewall. Regards On Wed, Aug 29, 2018 at 9:34 AM, sean darcy > wrote: I'm getting invites to very high ports every 30 seconds f

Re: [asterisk-users] getting invites to rtp ports ??

Hi Probably somebody is trying to hack your system, you should block that ip on your firewall. Regards On Wed, Aug 29, 2018 at 9:34 AM, sean darcy wrote: > I'm getting invites to very high ports every 30 seconds from a particular > ip address: > > Retransmitting #10 (NAT) to 5.199.133.128:5273

Re: [asterisk-users] getting invites to rtp ports ??

On Wed, Aug 29, 2018, at 10:34 AM, sean darcy wrote: > I'm getting invites to very high ports every 30 seconds from a > particular ip address: > > Retransmitting #10 (NAT) to 5.199.133.128:52734: > SIP/2.0 401 Unauthorized > Via: SIP/2.0/UDP > 0.0.0.0:52734;branch=z9hG4bK1207255353;received=5.19

[asterisk-users] getting invites to rtp ports ??

I'm getting invites to very high ports every 30 seconds from a particular ip address: Retransmitting #10 (NAT) to 5.199.133.128:52734: SIP/2.0 401 Unauthorized Via: SIP/2.0/UDP 0.0.0.0:52734;branch=z9hG4bK1207255353;received=5.199.133.128;rport=52734 From: ;tag=1872048972 To: ;tag=as3a52e748 C