Hi Steve,

Not using real-time.

John


From: asterisk-users-boun...@lists.digium.com 
[mailto:asterisk-users-boun...@lists.digium.com] On Behalf Of Steven Howes
Sent: Friday, October 18, 2013 4:30 AM
To: Asterisk Users Mailing List - Non-Commercial Discussion
Subject: Re: [asterisk-users] Hack

On 18 Oct 2013, at 04:06, John T. Bittner 
<j...@xaccel.net<mailto:j...@xaccel.net>> wrote:
Today I was hacked but caught it very quickly. This is the weird part, they 
hacked an IP Auth based account by simply knowing the account name.

How is this possible? I am running Asterisk 11.5.0. Now it's my fault I used a 
dictionary based account name but how did they bypass the set ip I had under 
the account for this host.

Did the IP show under sip show peer xxx? If it's realtime it's possible to set 
it and need to prune it / sip reload.

Steve
________________________________


Teach Canit xAntispam if this mail is spam:
Spam<http://mx1.xantispam.net/canit/b.php?i=02KCwuuL7&m=23b89b978a34&c=s>
Not spam<http://mx1.xantispam.net/canit/b.php?i=02KCwuuL7&m=23b89b978a34&c=n>
Forget previous 
vote<http://mx1.xantispam.net/canit/b.php?i=02KCwuuL7&m=23b89b978a34&c=f>
-- 
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
               http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to