Re: [Linphone-users] Random Incoming calls

[Dovid Bender]

I met Yealink and asked them why they had it enabled by default. They said
a lot of customers have different proxies and they would get more support
tickets if it was set to disabled. For firewalls how would this not help?
If they have a stateful firewall it would only accept packets where there
is a session out. So if they don't send a packet out there should be none
allowed back.


On Fri, Jun 11, 2021 at 12:01 AM Trent Creekmore  wrote:

> A firewall is not going to help. On many SIP telephones this can be an
> issue. On Yealink they have a setting labeled “Accept SIP trusted Server
> only” which will cause those ‘ghost calls’ to stop. I am not sure why they
> do not have it enabled. Seems this should be default on all SIP telephones
> these days.
>
>
>
> I have not seen such a setting on LinPhone, but I would of thought such
> security would be in the code.
>
>
>
>
>
>
>
> *From:* Linphone-users  lindows@nongnu.org> *On Behalf Of *Dovid Bender
> *Sent:* Thursday, June 10, 2021 6:48 PM
> *To:* linphone-users@nongnu.org
> *Subject:* Re: [Linphone-users] Random Incoming calls
>
>
>
> Without knowing your set up if I had to guess the calls you are getting
> are most likely from attackers out there that are looking for vulnerable
> phone systems to compromise. They will send calls to random IP's and if
> they find a vulnerable system they make calls on the phone systems owner's
> expense. Some phones have an option to disable such calls but I don't see
> one on Linphone (at least not in the version I have here). A simple
> firewall should be able to block such calls.
>
>
>
> On Thu, Jun 10, 2021 at 5:36 PM Ray Martel  wrote:
>
> I am using Linphone as a way to connect to a comrex ACCESS for radio
> reports.
>
> Recently I keep getting incoming calls that just don’t stop. This has
> happened with some but not all of us using this.
>
> Any idea of how to change settings to stop this?
>
> The second thing is that occasionally I can’t get an ip address on some
> installs. Instead I get a weird number after my name instead of an IP.
>
>
>
> Would really love to email with someone because this works great for me
> and I would like to fix these small but very annoying problem.
>
>
>
>
>
>
>
> *Ray Martel*
>
> Executive Producer WCBS Mets Radio Network,
>
> WCBS Newsroom Operations Manager
>
>
>
> *Audacy | New York*
>
> 345 Hudson St, 10th Fl
>
> New York, NY 10014
>
> O: +212-524-2904
>
> M: +917-414-0219
>
> ray.mar...@audacy.com
>
> WCBS 880 <https://wcbs880.radio.com/>
>
> [image: WCBS880_MetsRadio_pos_rgb]
>
>
>
>
>
> ___
> Linphone-users mailing list
> Linphone-users@nongnu.org
> https://lists.nongnu.org/mailman/listinfo/linphone-users
>
> ___
> Linphone-users mailing list
> Linphone-users@nongnu.org
> https://lists.nongnu.org/mailman/listinfo/linphone-users
>
___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

Re: [Linphone-users] Random Incoming calls

[Trent Creekmore]

A firewall is not going to help. On many SIP telephones this can be an issue. 
On Yealink they have a setting labeled “Accept SIP trusted Server only” which 
will cause those ‘ghost calls’ to stop. I am not sure why they do not have it 
enabled. Seems this should be default on all SIP telephones these days.

 

I have not seen such a setting on LinPhone, but I would of thought such 
security would be in the code.

 

 

 

From: Linphone-users  On 
Behalf Of Dovid Bender
Sent: Thursday, June 10, 2021 6:48 PM
To: linphone-users@nongnu.org
Subject: Re: [Linphone-users] Random Incoming calls

 

Without knowing your set up if I had to guess the calls you are getting are 
most likely from attackers out there that are looking for vulnerable phone 
systems to compromise. They will send calls to random IP's and if they find a 
vulnerable system they make calls on the phone systems owner's expense. Some 
phones have an option to disable such calls but I don't see one on Linphone (at 
least not in the version I have here). A simple firewall should be able to 
block such calls.

 

On Thu, Jun 10, 2021 at 5:36 PM Ray Martel mailto:ray.mar...@audacy.com> > wrote:

I am using Linphone as a way to connect to a comrex ACCESS for radio reports.

Recently I keep getting incoming calls that just don’t stop. This has happened 
with some but not all of us using this.

Any idea of how to change settings to stop this?

The second thing is that occasionally I can’t get an ip address on some 
installs. Instead I get a weird number after my name instead of an IP.

 

Would really love to email with someone because this works great for me and I 
would like to fix these small but very annoying problem.

 

 

 


Ray Martel

Executive Producer WCBS Mets Radio Network, 

WCBS Newsroom Operations Manager

 

Audacy | New York

345 Hudson St, 10th Fl

New York, NY 10014

O: +212-524-2904

M: +917-414-0219

 <mailto:ray.mar...@audacy.com> ray.mar...@audacy.com  

 <https://wcbs880.radio.com/> WCBS 880



 

 

___
Linphone-users mailing list
Linphone-users@nongnu.org <mailto:Linphone-users@nongnu.org> 
https://lists.nongnu.org/mailman/listinfo/linphone-users

___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

Re: [Linphone-users] Random Incoming calls

[Ray Martel]

Thank you Chris. The issue is at the linphone end. Not the Comrex end. My 
anchors are getting incoming calls to their computers. Is there any way to curb 
that?

Thank you for getting back to me.

Greatly appreciated.




Ray Martel

Executive Producer WCBS Mets Radio Network,

WCBS Newsroom Operations Manager



Audacy | New York

345 Hudson St, 10th Fl

New York, NY 10014

O: +212-524-2904

M: +917-414-0219

ray.mar...@audacy.com<mailto:ray.mar...@audacy.com>

WCBS 880<https://wcbs880.radio.com/>





From: Chris Woods 
Sent: Thursday, June 10, 2021 10:11:29 PM
To: linphone-users@nongnu.org 
Cc: ray.mar...@audacy.com 
Subject: Re: [Linphone-users] Random Incoming calls


[cid:121061022114600259@us-mta-591.us.mimecast.lan]

Hi Ray,

SIP spam sucks eh :(

My broadcasting workplace has a fleet of Access Racks which were regularly 
hammered, and due to the partial N/ACIP support (but no real tolerance for 
invalid signaling or drive-by attacks they would get from SIP spammers) they 
would frequently lock up, or mistakenly get stuck awaiting a valid handshake to 
complete and effectively become stuck engaged.

Not much you can do directly with the Comrexes except change listening ports 
(which itself brings the obvious challenges for interoperability), obfuscate 
them behind firewalls with whitelists, change their public IPs, perhaps 
restrict access to specific source IPs if feasible -- or even have them only 
accessible indirectly via SIP server or SBC and use that to help filter out the 
junk and noise hitting them. Happy to discuss off-list if you want.

Worth checking you're on the latest v4 firmware as the stability did improve a 
bit over the 2.7. If you're not aware, be sure to install new CF cards, as the 
old ones in our Racks were, and still are, notorious for spontaneously dying 
when power cycled after very long uptimes (and firmware updates).

Cheers
Chris


On Thu, 10 Jun 2021, 22:37 Ray Martel, 
mailto:ray.mar...@audacy.com>> wrote:

I am using Linphone as a way to connect to a comrex ACCESS for radio reports.

Recently I keep getting incoming calls that just don’t stop. This has happened 
with some but not all of us using this.

Any idea of how to change settings to stop this?

The second thing is that occasionally I can’t get an ip address on some 
installs. Instead I get a weird number after my name instead of an IP.



Would really love to email with someone because this works great for me and I 
would like to fix these small but very annoying problem.







Ray Martel

Executive Producer WCBS Mets Radio Network,

WCBS Newsroom Operations Manager



Audacy | New York

345 Hudson St, 10th Fl

New York, NY 10014

O: +212-524-2904

M: +917-414-0219

ray.mar...@audacy.com<mailto:ray.mar...@audacy.com>

WCBS 880<https://wcbs880.radio.com>



[WCBS880_MetsRadio_pos_rgb]





___
Linphone-users mailing list
Linphone-users@nongnu.org<mailto:Linphone-users@nongnu.org>
https://lists.nongnu.org/mailman/listinfo/linphone-users<https://lists.nongnu.org/mailman/listinfo/linphone-users>
___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

Re: [Linphone-users] Random Incoming calls

[Chris Woods]

Hi Ray,

SIP spam sucks eh :(

My broadcasting workplace has a fleet of Access Racks which were regularly
hammered, and due to the partial N/ACIP support (but no real tolerance for
invalid signaling or drive-by attacks they would get from SIP spammers)
they would frequently lock up, or mistakenly get stuck awaiting a valid
handshake to complete and effectively become stuck engaged.

Not much you can do directly with the Comrexes except change listening
ports (which itself brings the obvious challenges for interoperability),
obfuscate them behind firewalls with whitelists, change their public IPs,
perhaps restrict access to specific source IPs if feasible -- or even have
them only accessible indirectly via SIP server or SBC and use that to help
filter out the junk and noise hitting them. Happy to discuss off-list if
you want.

Worth checking you're on the latest v4 firmware as the stability did
improve a bit over the 2.7. If you're not aware, be sure to install new CF
cards, as the old ones in our Racks were, and still are, notorious for
spontaneously dying when power cycled after very long uptimes (and firmware
updates).

Cheers
Chris


On Thu, 10 Jun 2021, 22:37 Ray Martel,  wrote:

> I am using Linphone as a way to connect to a comrex ACCESS for radio
> reports.
>
> Recently I keep getting incoming calls that just don’t stop. This has
> happened with some but not all of us using this.
>
> Any idea of how to change settings to stop this?
>
> The second thing is that occasionally I can’t get an ip address on some
> installs. Instead I get a weird number after my name instead of an IP.
>
>
>
> Would really love to email with someone because this works great for me
> and I would like to fix these small but very annoying problem.
>
>
>
>
>
>
>
> *Ray Martel*
>
> Executive Producer WCBS Mets Radio Network,
>
> WCBS Newsroom Operations Manager
>
>
>
> *Audacy | New York*
>
> 345 Hudson St, 10th Fl
>
> New York, NY 10014
>
> O: +212-524-2904
>
> M: +917-414-0219
>
> ray.mar...@audacy.com
>
> WCBS 880 
>
> [image: WCBS880_MetsRadio_pos_rgb]
>
>
>
>
> ___
> Linphone-users mailing list
> Linphone-users@nongnu.org
> https://lists.nongnu.org/mailman/listinfo/linphone-users
>
___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users

Re: [Linphone-users] Random Incoming calls

[Dovid Bender]

Without knowing your set up if I had to guess the calls you are getting are
most likely from attackers out there that are looking for vulnerable phone
systems to compromise. They will send calls to random IP's and if they find
a vulnerable system they make calls on the phone systems owner's expense.
Some phones have an option to disable such calls but I don't see one on
Linphone (at least not in the version I have here). A simple firewall
should be able to block such calls.

On Thu, Jun 10, 2021 at 5:36 PM Ray Martel  wrote:

> I am using Linphone as a way to connect to a comrex ACCESS for radio
> reports.
>
> Recently I keep getting incoming calls that just don’t stop. This has
> happened with some but not all of us using this.
>
> Any idea of how to change settings to stop this?
>
> The second thing is that occasionally I can’t get an ip address on some
> installs. Instead I get a weird number after my name instead of an IP.
>
>
>
> Would really love to email with someone because this works great for me
> and I would like to fix these small but very annoying problem.
>
>
>
>
>
>
>
> *Ray Martel*
>
> Executive Producer WCBS Mets Radio Network,
>
> WCBS Newsroom Operations Manager
>
>
>
> *Audacy | New York*
>
> 345 Hudson St, 10th Fl
>
> New York, NY 10014
>
> O: +212-524-2904
>
> M: +917-414-0219
>
> ray.mar...@audacy.com
>
> WCBS 880 
>
> [image: WCBS880_MetsRadio_pos_rgb]
>
>
>
>
> ___
> Linphone-users mailing list
> Linphone-users@nongnu.org
> https://lists.nongnu.org/mailman/listinfo/linphone-users
>
___
Linphone-users mailing list
Linphone-users@nongnu.org
https://lists.nongnu.org/mailman/listinfo/linphone-users