<div dir="ltr">Catch the scenario here the hacker use external profile using port 5080 where sofia_contact is not checking and allow to pass the regex if user is also register on internal profile hence TRUE the regex also and call proceeds but in external profile configuration file when i make <br>
<br>auth-calls=true<br><br><div>call from hacker ip is not allowed but now i want to know is there any better or professional way to avoid hacker calls. if any one have any suggestion do reply me.<br><br></div><div>thanks in advance <br>
<br></div><div>Regards<br><br></div><div>Shahzad Bhatti<br><br></div><div><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Shahzad Bhatti</b> <span dir="ltr"><<a href="mailto:shahzad.bhatti@g-r-v.com">shahzad.bhatti@g-r-v.com</a>></span><br>
Date: Fri, Feb 28, 2014 at 11:51 PM<br>Subject: Call Without Authorization<br>To: <a href="mailto:freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a><br><br><br><div dir="ltr">Hi everybody,<div>
<br></div><div>i create my xml_curl script as that don't allow unregistered calls with the following condition</div><div><b><condition field=\"\${sofia_contact */{$sipuser}@$domain}\" expression=\"^[^@]+@(.+)\"></b><br>
</div><div>and its working but yesterday a call is originated from having </div><div><br></div><div><b>fs_cli log as </b></div><div><a href="http://pastebin.freeswitch.org/22050" target="_blank">http://pastebin.freeswitch.org/22050</a><br>
</div><div><br></div><div><b>xml_cdr is</b> </div><div><a href="http://pastebin.freeswitch.org/22052" target="_blank">http://pastebin.freeswitch.org/22052</a><br></div><div><br></div><div><div><b>dialplan xml is </b></div>
<div><a href="http://pastebin.freeswitch.org/22054" target="_blank">http://pastebin.freeswitch.org/22054</a><br>
</div></div><div><br></div><div>this is only example that how the hacker breached</div><div><br></div><div>i want to know that </div><div><b>1. how it is possible that this call is originated as i check condition that allow to call only registered sip accounts.</b></div>
<div><b>2. how to prevent that this would not happened in future. </b></div><div><b>3. if there any better way to do that do inform me;</b></div><div><br></div><div>i check about 500 calls placed under the given scenario and many of them also answered</div>
<div><br></div><div>Regards</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Shahzad Bhatti </div><div><br></div></font></span></div>
</div><br></div></div>