In my situation all calls
are rejected, but I think it is because they are authenticated with invalid
username.
My concern is how ones
can authenticate in freeswitch with user that not exists and never was
configured. I was not able to reproduce that.
What I found so far: they
use a couple of IPs. They send OPTIONS (only one time) during the day and start
try at the night. They tried a maximum of 100 calls.
I am still waiting to log
some packet
Mario
From:
freeswitch-users-bounces@lists.freeswitch.org
[mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of Michael Collins
Sent: Wednesday, February 20, 2013
10:41 PM
To: FreeSWITCH Users Help
Subject: Re: [Freeswitch-users]
freeswitch hack
Aren't they supposed to
be rejected?
On Wed, Feb 20, 2013 at 11:19 AM, Blake Priddy <bpriddy@bryantschools.org>
wrote:
I have also had the situation that they are calls getting rejected.
On Wed, Feb 20, 2013 at 11:08 AM, Michael Collins <msc@freeswitch.org>
wrote:
On Wed, Feb 20, 2013 at 1:53 AM, Mario Karakanovski <mario@ims.bg> wrote:
Thanks Ken,
It is helpful, but I still think there is some
security issue. I’ve double check configuration. I’ve try to
reproduce the issue trying to do direct call (TCP and UDP) or authenticate with
invalid user, but everything works as expected – calls/authentication was
rejected. I’ve decide to log the traffic – maybe I will be able to
see where is the problem.
What "security
issue"? You said that they cannot make calls with the passwords that
they've guessed, correct? About the only thing left to do is set up fail2ban and
just shut the door on them when they fail too many times.
-Michael
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
--
Blakelund
Priddy
Network Systems
Engineer
Bryant Public School District
Bryant, Arkansas 72022
http://www.bryantschools.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server
http://www.cudatel.com
Official FreeSWITCH Sites
http://www.freeswitch.org
http://wiki.freeswitch.org
http://www.cluecon.com
FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org
--
Michael S Collins
Twitter: @mercutioviz
http://www.FreeSWITCH.org
http://www.ClueCon.com
http://www.OSTAG.org