Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Захаров Антон
Hello! First of all, you should disable unused VoIP protocols. Than remove all guest accounts from used protocols, disable guest unauth access. Always use strong passwords for accounts, for users on your system. Passwords shouldn't be eq username. Move port binds on LAN network for all active

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Malvin Rito
Thanks. Any link for me to check for the procedure to implement those? Regards, Malvin On 7/21/2011 1:59 PM, Захаров Антон wrote: Hello! First of all, you should disable unused VoIP protocols. Than remove all guest accounts from used protocols, disable guest unauth access. Always use strong

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Steve Edwards
On 21.07.2011 09:29, Malvin Rito wrote: My asterisk box was hacked! On Thu, 21 Jul 2011, Захаров Антон wrote: First of all, you should disable unused VoIP protocols. Once a box has been hacked you cannot trust anything. Disconnect the box from the network, save whatever DATA ONLY you

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Захаров Антон
Yeap, drop out box is normal idea. But it's strongly wired what type of hack was. If it was only traffic leak without any footsteps in your system (shell history, files modification time, logs) I don't think that box couldn't be used any longer. Try to use port knocking (

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Terry Brummell
] On Behalf Of Malvin Rito Sent: Thursday, July 21, 2011 1:29 AM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] My Asterisk Box was hacked Hi List, My asterisk box was hacked! Can anyone help on how do I secure my asterisk box, currently my box is installed with 2

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Chad Wallace
On Thu, 21 Jul 2011 13:29:09 +0800 Malvin Rito mr...@mail.altcladding.com.ph wrote: My asterisk box was hacked! Can anyone help on how do I secure my asterisk box, currently my box is installed with 2 NIC. 1st NIC is for LAN access and 2nd NIC has a public IP which is registered to our VoIP

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Robert Huddleston
@lists.digium.com Subject: Re: [asterisk-users] My Asterisk Box was hacked On Thu, 21 Jul 2011 13:29:09 +0800 Malvin Rito mr...@mail.altcladding.com.ph wrote: My asterisk box was hacked! Can anyone help on how do I secure my asterisk box, currently my box is installed with 2 NIC. 1st NIC is for LAN access

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Steve Edwards
On Thu, 21 Jul 2011, Robert Huddleston wrote: When I get hacked I typically run a rootkit checker http://www.chkrootkit.org/ How often do you get hacked? How are 'they' breaking in? -- Thanks in advance, - Steve Edwards

Re: [asterisk-users] My Asterisk Box was hacked

2011-07-21 Thread Joaquin Sosa
Are you sure your box was actually hacked? Or did someone take advantage of a configuration error? -- _ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory

[asterisk-users] My Asterisk Box was hacked

2011-07-20 Thread Malvin Rito
Hi List, My asterisk box was hacked! Can anyone help on how do I secure my asterisk box, currently my box is installed with 2 NIC. 1st NIC is for LAN access and 2nd NIC has a public IP which is registered to our VoIP Provider. As I remember I already tried putting our Box on NAT but