Re: [asterisk-users] Securing Asterisk - How to avoid sending, SIP/2.0 603 Declined

2011-07-23 Thread Mitesh Thakkar
I think fail2ban can help in this issue. Regards, Mitesh Thakkar +91 94279 07952 Yahoo: miteshthakkar...@yahoo.co.in GTalk: mail.mthak...@gmail.com On Sat, Jul 23, 2011 at 10:04 AM, Bruce B bruceb...@gmail.com wrote: Robert thanks for weighing in. So, you are saying that FreeSwitch on it's

Re: [asterisk-users] 10.0.0 better than 2.0.0?

2011-07-23 Thread Julian Lyndon-Smith
it has been mentioned that 10 is of course 2 ... think not in base 10 On 22 July 2011 22:26, Matthew J. Roth mr...@imminc.com wrote: Kevin P. Fleming: The versions all go to ten. Look, right across the board, ten, ten, ten and... Asterisk Users: Oh, I see. And most open source projects

[asterisk-users] DISA password

2011-07-23 Thread Jonas Kellens
Hello list, how can I give a simple password to the DISA-application ? The following : exten = 1000,n,DISA('123456',from-TEST) results in : [Jul 23 13:47:51] WARNING[2357]: app_disa.c:255 disa_exec: DISA password file '123456' not found on chan SIP/test6-0006 Kind regards, Jonas. --

Re: [asterisk-users] DISA password

2011-07-23 Thread Alex Balashov
Try not encasing the password in single quotes. Just supply it as a bare argument. -- Alex Balashov - Principal Evariste Systems LLC 260 Peachtree Street NW Suite 2200 Atlanta, GA 30303 Tel: +1-678-954-0670 Fax: +1-404-961-1892 Web: http://www.evaristesys.com/ On Jul 23, 2011, at 5:51 AM,

Re: [asterisk-users] DISA password

2011-07-23 Thread Danny Nicholas
No quotes around 123456 From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Jonas Kellens Sent: Saturday, July 23, 2011 4:51 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] DISA password Hello

Re: [asterisk-users] Queue Issue : Duration between 2 agents call

2011-07-23 Thread Florent THOMAS
Hy, I checked so many parameters that I can't see anymore a solution to this. The duration is always of 5sec. Is there a config on hardphones that could freeze the process, Does the log could help you to identify the origin of this? Regards Le 11/07/2011 09:38, Ishfaq Malik a écrit : What

Re: [asterisk-users] Securing Asterisk - How to avoid sending, SIP/2.0 603 Declined

2011-07-23 Thread Bruce B
Not really. It's only good after DECLINED is sent. On Sat, Jul 23, 2011 at 2:08 AM, Mitesh Thakkar mail.mthak...@gmail.comwrote: I think fail2ban can help in this issue. Regards, Mitesh Thakkar +91 94279 07952 Yahoo: miteshthakkar...@yahoo.co.in GTalk: mail.mthak...@gmail.com On Sat,

Re: [asterisk-users] Securing Asterisk - How to avoid sending, SIP/2.0 603 Declined

2011-07-23 Thread Paul Belanger
On 11-07-23 12:34 AM, Bruce B wrote: Robert thanks for weighing in. So, you are saying that FreeSwitch on it's own can tackle issues like this without the need of OpenSIPs? Can you elaborate please? If true, I'd be curious to see how they accomplish it. I've never tried FreeSwitch but as

Re: [asterisk-users] use dahdi for local terminal modem access?

2011-07-23 Thread Lyle Giese
On 07/22/11 22:47, William Stillwell wrote: Um, no VOIP involved here. Wrong. What do you think Asterisk is? Chopped meat? It's a VoIP switch. All traffic inside Asterisk is VoIP. I have an asterisk server with 2 23B+D PRI's I want to telnet/ssh into the asterisk server, and make an

[asterisk-users] dialplan pattern help

2011-07-23 Thread Armand Fumal
Hi all, I need help for make a pattern for a special case that i can't find the solution. In my case I want to match these in one pattern: This is the same ext that can come in 4 cases exten = _42704701,1,Macro(dialfax,${EXTEN:-8}) ; case with 42704701 exten =

Re: [asterisk-users] Securing Asterisk - How to avoid sending, SIP/2.0 603 Declined

2011-07-23 Thread Patrick Lists
On 07/23/2011 04:00 PM, Paul Belanger wrote: A UAS rejecting an offer contained in an INVITE SHOULD return a 488 (Not Acceptable Here) response. Such a response SHOULD include a Warning header field value explaining why the offer was rejected. If the choice is to get hacked/DDOS'ed/etc or

Re: [asterisk-users] Securing Asterisk - How to avoid sending, SIP/2.0 603 Declined

2011-07-23 Thread Paul Belanger
On 11-07-23 11:48 AM, Patrick Lists wrote: On 07/23/2011 04:00 PM, Paul Belanger wrote: A UAS rejecting an offer contained in an INVITE SHOULD return a 488 (Not Acceptable Here) response. Such a response SHOULD include a Warning header field value explaining why the offer was rejected. If the

[asterisk-users] The queue is not routing for the agent: returned -1: Invalid argument

2011-07-23 Thread bilal ghayyad
Hi All; Asterisk version is 1.8.4 The call is going to the queue but it is not routing to the agent which is logged in. I am afraid that I am missing a parameter to be set or enable or disable in the queues.conf so it is causing not to route for the interface. I am getting the following error

[asterisk-users] Securing Asterisk

2011-07-23 Thread CDR
I beg to differ. Digium is hiding from the real world and somebody is going take the software and run with it. My customers lost in excess of $50.000 and cut my pay in half, because of hackers. The hackers figured out how to scan every asterisk for weak passwords or open ports, and bang them real

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread Darren Wiebe
Why not firewall hack attempts after 3 tries? When we started doing that the quantity of hacking attempts dropped right off. We also setup our own fail2ban sharing server so that we could share the bans across multiple servers. Have a look at

[asterisk-users] One way calling on asterisk to cisco call manager integration

2011-07-23 Thread Mitch Johnson
I'm trying to integrate my Asterisk box with my call manager 8 server. I can call from the call manager to a phone on asterisk, but I can't call from a phone on asterisk to call manager. Any help would be greatly appreciated. sip.conf [2000] type=friend secret= dtmfmode=rfc2833 host=dynamic

Re: [asterisk-users] The queue is not routing for the agent: returned -1: Invalid argument

2011-07-23 Thread Paul Belanger
On 11-07-23 01:18 PM, bilal ghayyad wrote: Hi All; Asterisk version is 1.8.4 The call is going to the queue but it is not routing to the agent which is logged in. I am afraid that I am missing a parameter to be set or enable or disable in the queues.conf so it is causing not to route for the

Re: [asterisk-users] One way calling on asterisk to cisco call manager integration

2011-07-23 Thread Danny Nicholas
Try duplicating cucm as cucm2 with qualify=no and dialing on cucm2. -Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Mitch Johnson Sent: Saturday, July 23, 2011 12:55 PM To: asterisk-users@lists.digium.com

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread Paul Belanger
On 11-07-23 01:38 PM, CDR wrote: I beg to differ. Digium is hiding from the real world and somebody is going take the software and run with it. My customers lost in excess of $50.000 and cut my pay in half, because of hackers. The hackers figured out how to scan every asterisk for weak passwords

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread Danny Nicholas
Simple economics tells me that we can't pay enough guys $X U.S. to stop the problem when we are competing with multiple folks working for $0.X US. Asterisk isn't the problem, it's just another limb on the victim tree. -Original Message- From: asterisk-users-boun...@lists.digium.com

Re: [asterisk-users] dialplan pattern help

2011-07-23 Thread Leif Madsen
On 11-07-23 10:30 AM, Armand Fumal wrote: Hi all, I need help for make a pattern for a special case that i can't find the solution. In my case I want to match these in one pattern: This is the same ext that can come in 4 cases exten = _42704701,1,Macro(dialfax,${EXTEN:-8})

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread Robert-iPhone
Such a pointless argument. The same problem can happen on any voip platform including freeswitch. Again it's a knowledge thing. BTW if you were paying attention to your logs or practiced good admin skills you would have seen the attacks and stopped them. I swear by fail2ban and other hardening

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread Eric Wieling
-Original Message- From: asterisk-users-boun...@lists.digium.com [mailto:asterisk-users- boun...@lists.digium.com] On Behalf Of CDR Sent: Saturday, July 23, 2011 1:39 PM To: asterisk-users@lists.digium.com Subject: [asterisk-users] Securing Asterisk I beg to differ. Digium is

[asterisk-users] Security questions

2011-07-23 Thread Flavio Miranda
Hello everybody! I'd like to heard from those with more experience in Security if the following configuration is a good attempt to prevent hack: exten = CALLER,2,Set(header=${SIP_HEADER(User-Agent)}) exten = CALLER,3,NoOp(Cabecalho ${header}) exten = CALLER,4,GotoIf($[${header}= My User

Re: [asterisk-users] Security questions

2011-07-23 Thread C F
It's not bad but it wont prevent flooding your box with register attempts and spoofing a user agent is trivia at best. On Sat, Jul 23, 2011 at 9:09 PM, Flavio Miranda flaviormira...@hotmail.com wrote: Hello everybody!   I'd like to heard from those with more experience in Security if the

Re: [asterisk-users] Securing Asterisk

2011-07-23 Thread C F
On Sat, Jul 23, 2011 at 1:38 PM, CDR vene...@gmail.com wrote: I beg to differ. Digium is hiding from the real world and somebody is Because you have no clue how to secure a box its someone elses fault? going take the software and run with it. My customers lost in excess of $50.000 and cut my