I believe I have my system "ready for use" Are there any exploit testing tools that test for the ability to make calls etc. off of a system? I have tested with sipvicious and sipsak but I am not positive that I am testing correctly. I would like a real hack test. The system has been "wide open" for a few weeks, fine-tuned fail2ban as well as the addition of a firewall that protects my FS machine (hopefully) and there have been no outbound calls made that I did not make there have been hundreds of various hackers/scanners that fail2ban blocked etc. I am not exactly sure where to go to make sure it is not a big bomb waiting to be set off. Jerry Allen
I would suggest contacting consulting@freeswitch.org and asking for a security review. It'll be more effective than just asking for black box scanning on the users list. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 11/04/2014 11:36 AM, Jerry Allen wrote:
I believe I have my system "ready for use" Are there any exploit testing tools that test for the ability to make calls etc. off of a system? I have tested with sipvicious and sipsak but I am not positive that I am testing correctly. I would like a real hack test. The system has been "wide open" for a few weeks, fine-tuned fail2ban as well as the addition of a firewall that protects my FS machine (hopefully) and there have been no outbound calls made that I did not make there have been hundreds of various hackers/scanners that fail2ban blocked etc.
I am not exactly sure where to go to make sure it is not a big bomb waiting to be set off.
Jerry Allen
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thank you for that idea. I just did so.... Jerry Allen -----Original Message----- From: freeswitch-users-bounces@lists.freeswitch.org [mailto:freeswitch-users-bounces@lists.freeswitch.org] On Behalf Of William King Sent: Tuesday, November 04, 2014 12:49 PM To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] Vulnerability Testing I would suggest contacting consulting@freeswitch.org and asking for a security review. It'll be more effective than just asking for black box scanning on the users list. William King Senior Engineer Quentus Technologies, INC 1037 NE 65th St Suite 273 Seattle, WA 98115 Main: (877) 211-9337 Office: (206) 388-4772 Cell: (253) 686-5518 william.king@quentustech.com On 11/04/2014 11:36 AM, Jerry Allen wrote:
I believe I have my system "ready for use" Are there any exploit testing tools that test for the ability to make calls etc. off of a system? I have tested with sipvicious and sipsak but I am not positive that I am testing correctly. I would like a real hack test. The system has been "wide open" for a few weeks, fine-tuned fail2ban as well as the addition of a firewall that protects my FS machine (hopefully) and there have been no outbound calls made that I did not make there have been hundreds of various hackers/scanners that fail2ban blocked etc.
I am not exactly sure where to go to make sure it is not a big bomb waiting to be set off.
Jerry Allen
______________________________________________________________________ ___ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-use rs http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (2)
-
Jerry Allen
-
William King