<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Mazilo,<div><br></div><div>well, as anyone said, you can't know that for sure.</div><div><br></div><div>Here, in France, and I think this may be applicable in most western countries, the end user of a telephony service will always receive only one CLI.</div><div>If the call comes from an analog line on the PSTN, the CLI is provided by the telco.</div><div>If the call comes from an ISDN line on the PSTN, the CLI is the one sent by the caller's PBX.</div><div>So for calls coming from ISDN, the telco will always add another CLI, the real CLI of the customer. We call it NDI in France (meaning Installation Number).</div><div>For SIP, you can guess what applies: no rules...</div><div>So basically, if you are a end user (not a telco), you will receive a CLI which can be fake.</div><div>If you are a telco and are interconnected in SIP or SS7 in the right way, you may (meaning "you are allowed to") receive the 2 CLIs for calls coming from ISDN.</div><div>For SIP calls, the issue is still there anyway: the reliability of the CLI depends on the seriousness of the ITSPs out there.</div><div><br></div><div><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" color="#1C00FF">David Ponzone </font><font class="Apple-style-span" color="#000000" size="3"><span class="Apple-style-span" style="font-size: 12px; ">Direction Technique</span></font></font></div><div><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; ">email: <a href="mailto:david.ponzone@ipeva.fr">david.ponzone@ipeva.fr</a></span></font></font></div><div><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; ">tel: 01 74 03 18 97</span></font></font></div><div><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; ">gsm: 06 66 98 76 34</span></font></font></div><div><font class="Apple-style-span" face="'Helvetica Neue'"><br></font></div><div><font class="Apple-style-span" color="#1C00FF" face="'Helvetica Neue'">Service Client<span class="Apple-converted-space"> </span></font><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" color="#FF0000">IP</font></font><font class="Apple-style-span" color="#1C00FF" face="'Helvetica Neue'">eva</font></div><div><font class="Apple-style-span" color="#1C00FF" face="'Helvetica Neue'"><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-family: Helvetica; "><div><font class="Apple-style-span" face="'Helvetica Neue'"><font class="Apple-style-span" size="3"><span class="Apple-style-span" style="font-size: 13px; ">tel: 0811 46 26 26</span></font></font></div><div><font class="Apple-style-span" face="'Helvetica Neue'" size="3"><span class="Apple-style-span" style="font-size: 13px; "><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Arial; color: rgb(0, 34, 243); "><span style="text-decoration: underline; "><a href="BLOCKED::http://www.ipeva.fr/">www.ipeva.fr</a></span><span style="color: rgb(101, 104, 149); "> - <span style="color: rgb(0, 34, 243); text-decoration: underline; "><a href="BLOCKED::http://www.ipeva-studio.com/">www.ipeva-studio.com</a></span></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Arial; color: rgb(0, 34, 243); "><span class="Apple-style-span" style="text-decoration: underline; "><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font: normal normal normal 10px/normal Arial; color: rgb(0, 34, 243); "><span class="Apple-style-span"><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; text-align: justify; font: normal normal normal 10px/normal Arial; color: rgb(192, 192, 192); "><i>Ce message et toutes les pièces jointes sont confidentiels et établis à l'intention exclusive de ses destinataires. Toute utilisation ou diffusion non autorisée est interdite. Tout message électronique est susceptible d'altération. </i><b><i>IPeva</i></b><i> décline toute responsabilité au titre de ce message s'il a été altéré, déformé ou falsifié. Si vous n'êtes pas destinataire de ce message, merci de le détruire immédiatement et d'avertir l'expéditeur.</i></div><div style="text-decoration: underline; text-align: justify; "><font class="Apple-style-span" color="#C0C0C0"><i><br></i></font></div></span></div></span></font></div></span></font></div></div></span><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline">
</div>
<br><div><div>Le 19/05/2011 à 04:01, mazilo a écrit :</div><br class="Apple-interchange-newline"><blockquote type="cite"><div>Today, after my phone rang with a CID of (443)366-9222, I took a look at<br>/var/log/freeswitch/freeswitch.log file on my Seagate DockStar (excerpted<br>below). What caught my attention is the last line which shows two numbers,<br>namely 4433669222 and 4016488312. The question I have is if 4433669222 is a<br>spoofed number?<br><br>2011-05-18 12:54:03.258849 [NOTICE] switch_channel.c:812 New Channel<br>sofia/external/4433669222@64.154.<br>2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4744 Channel<br>sofia/external/4433669222@64.154.41.150 enteri<br>2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4755 Remote SDP: <br>v=0^M <br>o=root 241964608 241964608 IN IP4 64.154.41.150^M <br>s=Asterisk PBX 1.6.2.13^M <br>c=IN IP4 64.154.41.150^M <br>t=0 0^M <br>m=audio 10730 RTP/AVP 0 8 3 18 101^M <br>a=rtpmap:0 PCMU/8000^M <br>a=rtpmap:8 PCMA/8000^M <br>a=rtpmap:3 GSM/8000^M <br>a=rtpmap:18 G729/8000^M <br>a=fmtp:18 annexb=no^M <br>a=rtpmap:101 telephone-event/8000^M <br>a=fmtp:101 0-16^M <br>a=ptime:20^M <br><br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare<br>[PCMU:0:8000:20:64000]/[G7221<br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare<br>[PCMU:0:8000:20:64000]/[G7221<br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare<br>[PCMU:0:8000:20:64000]/[G722:<br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4637 Audio Codec Compare<br>[PCMU:0:8000:20:64000]/[PCMU:<br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:2760 Set Codec<br>sofia/external/4433669222@64.154.41.150<br>2011-05-18 12:54:03.258849 [DEBUG] sofia_glue.c:4751 Set 2833 dtmf send/recv<br>payload to 101 <br>2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4922<br>(sofia/external/4433669222@64.154.41.150) State Change<br><br>2011-05-18 12:54:03.258849 [DEBUG] sofia.c:4922<br>(sofia/external/4433669222@64.154.41.150) State Change<br>2011-05-18 12:54:03.258849 [DEBUG] switch_core_session.c:1116 Send signal<br>sofia/external/4433669222@64<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:320<br>(sofia/external/4433669222@64.154.4<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:356<br>(sofia/external/4433669222@64.154.4<br>2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:84<br>sofia/external/4433669222@64.154.41.150 SOFIA INIT <br>2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:124<br>(sofia/external/4433669222@64.154.41.150) State Cha<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_session.c:1116 Send signal<br>sofia/external/4433669222@64<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:356<br>(sofia/external/4433669222@64.154.4<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:320<br>(sofia/external/4433669222@64.154.4<br>2011-05-18 12:54:03.265631 [DEBUG] switch_channel.c:1668<br>(sofia/external/4433669222@64.154.41.150) Cal<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:359<br>(sofia/external/4433669222@64.154.4<br>2011-05-18 12:54:03.265631 [DEBUG] mod_sofia.c:147<br>sofia/external/4433669222@64.154.41.150 SOFIA ROUTI<br>2011-05-18 12:54:03.265631 [DEBUG] switch_core_state_machine.c:77<br>sofia/external/4433669222@64.154.41.<br>2011-05-18 12:54:03.265631 [INFO] mod_dialplan_xml.c:331 Processing<br>4433669222 <4433669222>->401648831<br><br><br>-----<br>FreeSWITCH hosted on a Seagate DockStar with OpenWRT and ONLY consumes 3 Watts of electricity.<br>--<br>View this message in context: <a href="http://freeswitch-users.2379917.n2.nabble.com/Spoofed-CID-tp6380373p6380373.html">http://freeswitch-users.2379917.n2.nabble.com/Spoofed-CID-tp6380373p6380373.html</a><br>Sent from the freeswitch-users mailing list archive at <a href="http://Nabble.com">Nabble.com</a>.<br><br>_______________________________________________<br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users<br>http://www.freeswitch.org<br></div></blockquote></div><br></div></body></html>