[Freeswitch-users] Call redirect

[Steven Ayre]

>
> since there are plenty of services that use Caller ID from the PSTN for
> authentication that could be a problem.


Of course with flowroute (and I'm sure others) already allowing it those
services are insecure anyway unless they request something else (PIN) too,
and even then a phone call isn't that secure anyway (easy to packet capture
DTMF anywhere along the way).

-Steve




On 12 July 2013 20:11, Steven Ayre <steveayre at gmail.com> wrote:

> It's all about Caller ID spoofing. If you are allowed to send anything you
> could abuse that, and since there are plenty of services that use Caller ID
> from the PSTN for authentication that could be a problem.
>
> Wholesale carriers might allow it between themselves (trusted), but it
> would be undesirable to allow it for end-users.
>
> If you actually own the number (such as with DIDs) then that's a slightly
> more specific case. If you could prove ownership to Y & Z and they had a
> configurable whitelist then they might be able to add them to the list
> since they can then trust you for those numbers, but they couldn't do that
> for any random number you might send.
>
> Proving ownership (and that you still own it) wouldn't be a very simple
> task to handle securely though?
>
> -Steve
>
>
>
>
> On 12 July 2013 14:41, Ken Rice <krice at freeswitch.org> wrote:
>
>>  I tend to disagree with that comment about a decent operator... I find
>> the opposite to be true... If you have DIDs from say Carrier X, and you
>> want your calls to be able to go out Carriers Y & Z and you don’t have any
>> DIDs with carrier Y & Z how are you supposed to terminate with them... Even
>> better you have a few DIDs with all of them, you should be able to send
>> CLID for any of your DIDs out any of your carriers...
>>
>>
>> On 7/12/13 12:46 AM, "Yehavi Bourvine" <yehavi.bourvine at gmail.com> wrote:
>>
>> I have a similar problem. I set the callerID to the user's extension, so
>> he knows this is a forwarded call.
>>
>> A decent operator won't accept a callerID not fron your range. I guess
>> you understand why.
>>
>>      Yehaci.
>>
>> בתאריך 12 ביול 2013 07:47, מאת "Shishko" <shishko69 at gmail.com>:
>>
>> Hi,
>>
>> when a user redirects its phone to mobile number, ITSP rejects call
>> because caller id is not in our range of numbers. If I change CID to one of
>> our numbers, call is accepted, but users would like to see original CID .
>> Is there a way I could deflect a call to ITSP so user could see original
>> caller id?
>>
>> Thanks,
>>
>> Denis
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> ------------------------------
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>> --
>> Ken
>> *http://www.FreeSWITCH.org
>> http://www.ClueCon.com
>> http://www.OSTAG.org
>> *irc.freenode.net #freeswitch
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> 
>> 
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://wiki.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130712/5ac882b2/attachment-0001.html