HI Everyone, I didn't bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too. I want to allow the users in the sample Freeswitch config to login - but to special context. In the "special" context, everything they dial plays a recording like "you're an ass hangup and try again" or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them! Anyone got better ideas? I would love to hear them. I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won't achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts. Sean
http://itslenny.com/ On Mon, Aug 6, 2012 at 9:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
Lenny's old. You could just make up the credentials for the default users and set the user-context to your "special" context. From there write that context out and be a little imaginative :P On Mon, Aug 6, 2012 at 8:04 PM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
On Mon, Aug 6, 2012 at 9:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II
FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire
AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch
FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
hehe to lenny just watch out for ear piercing noise. you can can get sued for that allow them to register and do nothing. they will eventually scrub you off their list of targets. IANAL & YMMV On 07/08/2012, at 1:18 PM, curriegrad2004 wrote:
Lenny's old.
You could just make up the credentials for the default users and set the user-context to your "special" context. From there write that context out and be a little imaginative :P
On Mon, Aug 6, 2012 at 8:04 PM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
On Mon, Aug 6, 2012 at 9:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II
FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire
AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch
FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Just have the dialplan send the users to the one tonestream you want, also next time take a look at http://wiki.freeswitch.org/wiki/Fs_logger.pl not only can it autoscrub most of the data for you but you can specify an additional dictionary of stuff for it to scrub prior to PBing something. ~mitch On Mon, Aug 6, 2012 at 8:41 PM, Chris Mylonas <chris@opencsta.org> wrote:
hehe to lenny just watch out for ear piercing noise. you can can get sued for that allow them to register and do nothing. they will eventually scrub you off their list of targets.
IANAL & YMMV
On 07/08/2012, at 1:18 PM, curriegrad2004 wrote:
Lenny's old.
You could just make up the credentials for the default users and set the user-context to your "special" context. From there write that context out and be a little imaginative :P
On Mon, Aug 6, 2012 at 8:04 PM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
On Mon, Aug 6, 2012 at 9:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Anthony Minessale II
FreeSWITCH http://www.freeswitch.org/ ClueCon http://www.cluecon.com/ Twitter: http://twitter.com/FreeSWITCH_wire
AIM: anthm MSN:anthony_minessale@hotmail.com GTALK/JABBER/PAYPAL:anthony.minessale@gmail.com IRC: irc.freenode.net #freeswitch
FreeSWITCH Developer Conference sip:888@conference.freeswitch.org googletalk:conf+888@conference.freeswitch.org pstn:+19193869900
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
In 99% of these cases your machine is being hit by a bot (sipvicious, etc). Playing media is only going to waste your bandwidth and CPU resources (chances are they're using a rooted machine). No human will ever hear your special message. Your "adult option" is the best bet. Drop them, log them, and move on. On Mon, Aug 6, 2012 at 10:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
I acutally used to have a "This number is not in service...... Thank you from WHHAATTT THHHEEEEEE F************" recording somwhere for rejected outbound calls. As krisitian said, just drop it and move on On Wed, Aug 8, 2012 at 7:54 AM, Kristian Kielhofner <kris@kriskinc.com> wrote:
In 99% of these cases your machine is being hit by a bot (sipvicious, etc). Playing media is only going to waste your bandwidth and CPU resources (chances are they're using a rooted machine). No human will ever hear your special message.
Your "adult option" is the best bet. Drop them, log them, and move on.
On Mon, Aug 6, 2012 at 10:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Wed, 8 Aug 2012 08:51:00 -0700 curriegrad2004 <curriegrad2004@gmail.com> wrote:
I acutally used to have a "This number is not in service...... Thank you from WHHAATTT THHHEEEEEE F************" recording somwhere for rejected outbound calls.
Hmm, how about: "Congratulations, you've reached the FBI VoIP honeypot bureau. We'll soon have a little chat that we're sure you won't forget... ever" ];-) JY -- Thom : Maintenant si tu telecharges, ils te coupent ta connexion internet, apres ce sera qd tu chantera ss la douche ils te couperont l'eau
My servers are constantly getting hit by bots/wankers. It's not that big of a deal if you know how to take care of it (fail2ban works wonders). Obscurity is not really security. I've stopped sanitizing my logs for the server ip's. I just don't care anymore. Brian Foster Endigo Computer LLC Sent from a mobile device. On Aug 8, 2012 10:56 AM, "Kristian Kielhofner" <kris@kriskinc.com> wrote:
In 99% of these cases your machine is being hit by a bot (sipvicious, etc). Playing media is only going to waste your bandwidth and CPU resources (chances are they're using a rooted machine). No human will ever hear your special message.
Your "adult option" is the best bet. Drop them, log them, and move on.
On Mon, Aug 6, 2012 at 10:34 PM, Sean Devoy <sdevoy@bizfocused.com> wrote:
HI Everyone,
I didn’t bother to obliterate my servers real identity from my last pastebin post, shame on me. Of course within 24 hours some a$$hole is trying the default login ids for Freeswitch. I am not quite a noob here, but this would take me some time to do and I know some of you guys could crank this out in minutes. Of course you all probably have better ideas too.
I want to allow the users in the sample Freeswitch config to login – but to special context. In the “special” context, everything they dial plays a recording like “you’re an ass hangup and try again” or perhaps and ear piercing LOUD tone. Even better would be to dial them every few minutes with the same recording or sound. Best of all, if we can detect that they are on a CISCO 5xx phone, I have a special config file to send them!
Anyone got better ideas? I would love to hear them.
I suppose the adult choice would be to gather their external and internal ip addresses and report them to their ISP, but that won’t achieve much. Maybe we could build a blacklist and watch for them to connect to the Freeswitch conf call. Then we could all tell them how much we enjoy their efforts.
Sean
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Kristian Kielhofner
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
FreeSWITCH-powered IP PBX: The CudaTel Communication Server http://www.cudatel.com
Official FreeSWITCH Sites http://www.freeswitch.org http://wiki.freeswitch.org http://www.cluecon.com
Join Us At ClueCon - Aug 7-9, 2012
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (8)
-
Anthony Minessale
-
Brian Foster
-
Bzzz
-
Chris Mylonas
-
curriegrad2004
-
Kristian Kielhofner
-
Mitch Capper
-
Sean Devoy