<html><head><style>body{font-family:Helvetica,Arial;font-size:13px}</style></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div id="bloop_customfont" style="font-family:Helvetica,Arial;font-size:13px; color: rgba(0,0,0,1.0); margin: 0px; line-height: auto;"><br></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); margin: 0px;"><font face="Verdana">No, he mentioned below …</font></div><div id="bloop_customfont" style="color: rgb(0, 0, 0); margin: 0px;"><div class="gmail_default" style="font-family: verdana, sans-serif;"><br></div><div class="gmail_default" style="font-family: verdana, sans-serif; font-size: 13px;">...I have a multi domain setup. We receive calls from unknown extensions (<span class="" id=":31u.1" tabindex="-1">eg</span>: 100 , 101,1000,1007 etc ).But there is no voice in it…</div><div class="gmail_default" style="font-family: verdana, sans-serif; font-size: 13px;"><br></div><div class="gmail_default" style="font-family: verdana, sans-serif; font-size: 13px;">So it look like the call is able to come in. He needs to look into the logs to figure out what’s going on.</div><div style="font-family: Helvetica, Arial; font-size: 13px;"><br></div></div> <br> <div id="bloop_sign_1419408170130851072" class="bloop_sign"><div style="font-family:helvetica,arial;font-size:13px">-- <br>Muhammad Naseer Bhatti<br></div></div> <div style="color:black"><br>From: <span style="color:black">Luis Daniel Lucio Quiroz</span> <a href="mailto:luis.daniel.lucio@gmail.com"><luis.daniel.lucio@gmail.com></a><br>Reply: <span style="color:black">FreeSWITCH Users Help</span> <a href="mailto:freeswitch-users@lists.freeswitch.org"><freeswitch-users@lists.freeswitch.org>></a><br>Date: <span style="color:black">December 24, 2014 at 4:19:26 AM</span><br>To: <span style="color:black">FreeSWITCH Users Help</span> <a href="mailto:freeswitch-users@lists.freeswitch.org"><freeswitch-users@lists.freeswitch.org>></a><br>Subject: <span style="color:black"> Re: [Freeswitch-users] Receives call From Unknown Extensions <br></span></div><br> <blockquote type="cite" class="clean_bq"><span><div><div></div><div>Dont worry, your are a target of a kiddy script. As you dont use
<br>numeric extensions, they wont authenticate. And as you are using
<br>multitenant, they should be targering the IP (as domain, for example
<br>100@1.1.1.1) instead 100@yourdomain. So they wont be able to
<br>authenticate (if multidomain is on).
<br>
<br>CDR will still show the failled call. Its normal, FS is reporting a
<br>failed attempt.
<br>
<br>2014-12-22 17:55 GMT-05:00 Thomas Auge <auge@virtues.net>:
<br>> To eliminate the guessing, check the logs which route the calls took through the system. It should contain the clues you
<br>> need. You might need to up the log level a bit ...
<br>>
<br>>
<br>> On 22.12.2014 19:44, Lloyd Aloysius wrote:
<br>>> Fail2Ban is running in the system
<br>>>
<br>>> I do not have any default dial plans or extensions.
<br>>>
<br>>>
<br>>>
<br>>>
<br>>>
<br>>> On Mon, Dec 22, 2014 at 5:35 PM, Thomas Auge <auge@virtues.net <mailto:auge@virtues.net>> wrote:
<br>>>
<br>>> Do you still have the external domain enabled? I think it routes external calls matching a specific number theme (
<br>>> ^(10[01][0-9])$ ) to the internal users through the pre-installed dialplan. It listens on different ports (5080/1).
<br>>> Config is in sip_profiles/external.xml and dialplan/public.xml.
<br>>>
<br>>> I see an insane amount of brute force attempts against our PBX', so if there is a way to get anywhere, you can expect
<br>>> people to try it - over and over and over ... I can recommend fail2ban. :-)
<br>>>
<br>>> Just guessing though, if I'm wrong, someone more knowledgeable will probably chime in. :)
<br>>>
<br>>>
<br>>> On 22.12.2014 19:16, Lloyd Aloysius wrote:
<br>>> > Hi All
<br>>> >
<br>>> > I have a multi domain setup. We receive calls from unknown extensions (eg: 100 , 101,1000,1007 etc ).But there is no
<br>>> > voice in it.
<br>>> >
<br>>> > We do not have any default extensions in the system and all default extensions removed from the system.
<br>>> >
<br>>> > Users are authenticated by alphanumeric (like an email username) Eg: mike@mydomain.com <mailto:mike@mydomain.com>
<br>>> and passwords are very
<br>>> > complicated.
<br>>> >
<br>>> > How someone can call a user without authentication from these extensions?
<br>>> >
<br>>> > Please let me know how to solve this issue.
<br>>> >
<br>>> > Thanks Lloyd
<br>>> >
<br>>> >
<br>>> >
<br>>> >
<br>>> >
<br>>> > _________________________________________________________________________ Professional FreeSWITCH Consulting
<br>>> > Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
<br>>> >
<br>>> > Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
<br>>> >
<br>>> > FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org>
<br>>> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
<br>>> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
<br>>> >
<br>>>
<br>>>
<br>>> _________________________________________________________________________
<br>>> Professional FreeSWITCH Consulting Services:
<br>>> consulting@freeswitch.org <mailto:consulting@freeswitch.org>
<br>>> http://www.freeswitchsolutions.com
<br>>>
<br>>> Official FreeSWITCH Sites
<br>>> http://www.freeswitch.org
<br>>> http://confluence.freeswitch.org
<br>>> http://www.cluecon.com
<br>>>
<br>>> FreeSWITCH-users mailing list
<br>>> FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org>
<br>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
<br>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
<br>>> http://www.freeswitch.org
<br>>>
<br>>>
<br>>>
<br>>>
<br>>> _________________________________________________________________________
<br>>> Professional FreeSWITCH Consulting Services:
<br>>> consulting@freeswitch.org
<br>>> http://www.freeswitchsolutions.com
<br>>>
<br>>> Official FreeSWITCH Sites
<br>>> http://www.freeswitch.org
<br>>> http://confluence.freeswitch.org
<br>>> http://www.cluecon.com
<br>>>
<br>>> FreeSWITCH-users mailing list
<br>>> FreeSWITCH-users@lists.freeswitch.org
<br>>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
<br>>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
<br>>> http://www.freeswitch.org
<br>>>
<br>>
<br>>
<br>> _________________________________________________________________________
<br>> Professional FreeSWITCH Consulting Services:
<br>> consulting@freeswitch.org
<br>> http://www.freeswitchsolutions.com
<br>>
<br>> Official FreeSWITCH Sites
<br>> http://www.freeswitch.org
<br>> http://confluence.freeswitch.org
<br>> http://www.cluecon.com
<br>>
<br>> FreeSWITCH-users mailing list
<br>> FreeSWITCH-users@lists.freeswitch.org
<br>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
<br>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
<br>> http://www.freeswitch.org
<br>
<br>_________________________________________________________________________
<br>Professional FreeSWITCH Consulting Services:
<br>consulting@freeswitch.org
<br>http://www.freeswitchsolutions.com
<br>
<br>Official FreeSWITCH Sites
<br>http://www.freeswitch.org
<br>http://confluence.freeswitch.org
<br>http://www.cluecon.com
<br>
<br>FreeSWITCH-users mailing list
<br>FreeSWITCH-users@lists.freeswitch.org
<br>http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
<br>UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
<br>http://www.freeswitch.org
<br></div></div></span></blockquote></body></html>