Re: [asterisk-users] one for your filters

2010-06-24 Thread Gordon Henderson
On Wed, 23 Jun 2010, Steve Edwards wrote: On Wed, 23 Jun 2010, Gordon Henderson wrote: Ouch. 82.0.0.0/8 is on my block list, available at: http://www.sedwards.com/class-a-block-list If you don't need to receive packets from far away places, it's a great start. I'd like to have a

[asterisk-users] one for your filters

2010-06-23 Thread Jeff LaCoursiere
Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. A more overriding problem for me is how do we know what *destinations* to filter so this idea of war dialing a toll

Re: [asterisk-users] one for your filters

2010-06-23 Thread Gordon Henderson
On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. A more overriding problem for me is how do we know what

Re: [asterisk-users] one for your filters

2010-06-23 Thread Tarek Sawah
To: asterisk-users@lists.digium.com Subject: [asterisk-users] one for your filters Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. A more overriding

Re: [asterisk-users] one for your filters

2010-06-23 Thread Dean Hoover
You can look at it a few different ways. Use one or more methods: 1. If you are allowing SIP phones to register from anywhere (inside and outside your network), make sure all the extensions have VERY strong passwords (12 characters or more of absolute jibberish). 2. Use deny/permit for

Re: [asterisk-users] one for your filters

2010-06-23 Thread Steve Edwards
On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. Ouch. 82.0.0.0/8 is on my block list, available at:

Re: [asterisk-users] one for your filters

2010-06-23 Thread Jeff LaCoursiere
On Wed, 23 Jun 2010, Gordon Henderson wrote: On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. A more overriding

Re: [asterisk-users] one for your filters

2010-06-23 Thread Jeff LaCoursiere
On Wed, 23 Jun 2010, Tarek Sawah wrote: you can start by simply telling us what is the purpose of your server.. and does it have long distance of overseas?? do you use Numeric usernames? simple passwords? passwords the same as your username? this way you can offer more info so we can

Re: [asterisk-users] one for your filters

2010-06-23 Thread Jeff LaCoursiere
On Wed, 23 Jun 2010, Steve Edwards wrote: On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night. Filter 82.150.165.5. Ouch. 82.0.0.0/8 is on

Re: [asterisk-users] one for your filters

2010-06-23 Thread Steve Howes
On 23 Jun 2010, at 18:39, Steve Edwards wrote: Ouch. 82.0.0.0/8 is on my block list, available at: http://www.sedwards.com/class-a-block-list Would advise people in the UK do not use that list... 82.0.0.0/8 would block a reasonable chunk of my users for starters.. Steve --

Re: [asterisk-users] one for your filters

2010-06-23 Thread Steve Howes
On 23 Jun 2010, at 19:26, Steve Howes wrote: On 23 Jun 2010, at 18:39, Steve Edwards wrote: Ouch. 82.0.0.0/8 is on my block list, available at: http://www.sedwards.com/class-a-block-list Would advise people in the UK do not use that list... 82.0.0.0/8 would block a reasonable

Re: [asterisk-users] one for your filters

2010-06-23 Thread Andrew Latham
http://www.spamhaus.org/drop/ is a good resource that I use. ~ Andrew lathama Latham lath...@gmail.com * Learn more about OSS http://en.wikipedia.org/wiki/Open-source_software * Learn more about Linux http://en.wikipedia.org/wiki/Linux * Learn more about Tux http://en.wikipedia.org/wiki/Tux

Re: [asterisk-users] one for your filters

2010-06-23 Thread Steve Edwards
On 23 Jun 2010, at 18:39, Steve Edwards wrote: Ouch. 82.0.0.0/8 is on my block list, available at: http://www.sedwards.com/class-a-block-list On Wed, 23 Jun 2010, Steve Howes wrote: Would advise people in the UK do not use that list... 82.0.0.0/8 would block a reasonable chunk of my

Re: [asterisk-users] one for your filters

2010-06-23 Thread Gordon Henderson
On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: On Wed, 23 Jun 2010, Steve Edwards wrote: On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used one of our SIP accounts to place four thousand calls to what appears to be a toll number in Zimbabwe last night.

Re: [asterisk-users] one for your filters

2010-06-23 Thread Jian Gao
Not sure what kind of provision server you have there. But do not use http as your provision protocol. Use https instead. Jian Jeff LaCoursiere wrote: On Wed, 23 Jun 2010, Tarek Sawah wrote: you can start by simply telling us what is the purpose of your server.. and does it have long

Re: [asterisk-users] one for your filters

2010-06-23 Thread John Novack
Reachable from here. ( US -Comcast ) John Novack Dog is my Co-pilot Gordon Henderson wrote: On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: On Wed, 23 Jun 2010, Steve Edwards wrote: On Wed, 23 Jun 2010, Jeff LaCoursiere wrote: Some !...@$#@@# in the Czech Republic used

Re: [asterisk-users] one for your filters

2010-06-23 Thread Administrator TOOTAI
Le 23/06/2010 21:28, Gordon Henderson a écrit : [...] I'd like to have a look, but can't - I think there may be issues with your registrar for your domain - from where I am, there are no glue records for the nameservers, therefore I can't look it up... Looks like it was last edited just over

Re: [asterisk-users] one for your filters

2010-06-23 Thread Steve Edwards
On Wed, 23 Jun 2010, Gordon Henderson wrote: Ouch. 82.0.0.0/8 is on my block list, available at: http://www.sedwards.com/class-a-block-list If you don't need to receive packets from far away places, it's a great start. I'd like to have a look, but can't - I think there may be issues

Re: [asterisk-users] one for your filters

2010-06-23 Thread Dave Platt
I'm still trying to figure that out. Our SIP usernames are seven digit phone numbers, so not really difficult to guess, but the passwords are 7 char alpha-numeric strings, auto generated. We don't at present restrict people to their addresses, as some are dynamic. If they're randomly

Re: [asterisk-users] one for your filters

2010-06-23 Thread Dave Platt
I'm still trying to figure that out. Our SIP usernames are seven digit phone numbers, so not really difficult to guess, but the passwords are 7 char alpha-numeric strings, auto generated. We don't at present restrict people to their addresses, as some are dynamic. If the extension in