It was an interesting experience. Has anyone else experienced the same problem and had the police involved? I did mention that I would change the Dial string. The police told me that a person has to be able to dial 911 and get emergency services. I gave up and just walked over to the all-star computer and hit the power button. Sadly, it has been off ever since. If I had changed the 911 Dial string before the incident. The police would of not gotten involved. Never known about the situation. Just let everyone know. The two police officers were very good about it. They told me that its happening a lot and 911 is getting a little upset about it. I told them they should go after the person responsible. They told me that's you. The line is in your name. Anyway, just wanted to throw out there my experience. Dwaine Jim Duuuude <telesistant@hotmail.com> wrote:
<!-- .hmmessage P { margin:0px; padding:0px } body.hmmessage { font-size: 12pt; font-family:Calibri } -->
Okay (and yes, that is STUPID and most likely WRONG, but most police depts are just completely ignorant of telecom issues). So, fine... GIVE them access to 911. Let them dial it. But, sadly, on YOUR phone network, the dialing string is just a LITTLE bit longer (like about 30 digits in front of the 911)... get it?
Jim
Date: Thu, 5 Sep 2013 14:07:58 -0400 From: DwaineGarden@rogers.com To: dshaw@ke6upi.com CC: app_rpt-users@ohnosec.org Subject: Re: [App_rpt-users] SIP VoIP for Asterisk
The problem is you are not allowed by law to have a phone without unrestricted access to 911. I had Metro Toronto police at my door explaining that even if I block 911 to any outside connections I would be breaking the law. If you have a server on the internet with sip. They have to able to connect to be able to call 911.
I told the police it was retard. They told me that was fine they will charge me.
Police told me that even if someone breaks into your house. If there is a phone install, the criminals better have access to dial 911 unrestrictive.
The hackers did not get into the box. They were trying for months. Got pissed off and changed their script to dial 911 constantly. SIP and DID see a 911 call. It dials it. No questions asked. No login or nothing.
The Police told me it was a huge problem. SIP or DID are setup like a public pay phone. Full access to 911.
It was an eye opener for me. You learn something new everyday. If I see someone asking about SIP or DID. I let them know about my experience.
David KE6UPI <dshaw@ke6upi.com> wrote:
I'm sorry Dwaine what are you talking about? Sorry If I don't understand what your talking about.
I have both a public Asterisk server and a local Asterisk server. I have never had anyone connect and make a call that was not authenticated user.. Yes they try and fail2ban will block them. There are many way to stop unwanted hackers on your server.
As for dialing 911 just make a dial plain to route to space if you want.
Google "Asterisk Security"
http://www.voip-info.org/wiki/view/Asterisk+security
David
On Thu, Sep 5, 2013 at 9:13 AM, Dwaine Garden VE3GIF <DwaineGarden@rogers.com> wrote:
It works great until the hacks find the machine. They port scan non stop. Its especially fun when their scripts dial 911 constantly. There is no way to turn off dialing 911 for SIP.
Bill South <wbs099@yahoo.com> wrote:
I'm thinking of adding some type of SIP trunking or other VoIP service provider to my ACID Asterisk system to support in/out bound calling. I've read some emails on the app_rpt reflector with names of providers mentioned, but I am looking for recommendations, as there are zillions of VoIP providers out there. This is going to be used very sparingly so least-cost is a good thing, but good reliability and no bombardment with email adds by the provider is desired too. I can easily get by with a single number, but may want to add additional DIDs later. Thoughts?
Bill
_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users
_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users