Attacks from Hackers

Rank: 1

20^#

發表於 2011-12-19 08:51 | 只看該作者

If you guys have time, you may refer to the tutorial in BackTrack as below to see whether your VoIP system is strong enough or too vulerable to resist attack.

http://www.backtrack-linux.org/wiki/index.php/Pentesting_VOIP

Rank: 1

19^#

發表於 2011-12-19 06:52 | 只看該作者

回復 18# Qnewbie

Only way to try is to have stronger firewall set at router and very stron username/password.

Qnewbie

Rank: 1

18^#

發表於 2011-12-19 06:50 | 只看該作者

[Dec 18 20:58:49] NOTICE[353]: chan_sip.c:16457 handle_request_register: Registration from '"Darkman" <siparkman@myipaddress>' failed for '96.44.146.48' - No matching peer found

Another attack type with "faked" ip address(using my ip address) to break into my asterisk server. 82 trials per second, which droves my little IP01 to 50% CPU power

I need a better firewall to drop those meaningless attacks!!!

bubblestar

Rank: 1

17^#

發表於 2010-8-11 10:43 | 只看該作者

應該會有一定作用。但未必能防止對方亂撞，當然機會少了很多。

另一方面它也會局限了使用上的彈性，即是只能為預設的DOMAIN提供服務。如果我要給你掛電話，便可能造成不便。不過也真正做到了 Private Branch Exchange 中的 Private 了。

Rank: 1

16^#

發表於 2010-8-11 06:42 | 只看該作者

Don't know if i configure sip domains can help?

http://www.smartvox.co.uk/astfaq_sip_domains.htm

Rank: 1

15^#

發表於 2010-8-10 17:35 | 只看該作者

In fact Asterisk does allow letters for extension but use number for convenience. So the hacker must ...
角色發表於 2010-8-10 16:39

How to change to alphanumeric user extensions or login in alphanumeric but keep user extension as numerical?

角色

註冊會員

Rank: 2

14^#

發表於 2010-8-10 17:14 | 只看該作者

How about other members? What is the length and the format of your password in the extension password?

By the way, the root password must be very long enough otherwise it would be very easily hacked. Mine is a 13-alphanumerical digits.

YH

角色

註冊會員

Rank: 2

13^#

發表於 2010-8-10 16:39 | 只看該作者

In fact Asterisk does allow letters for extension but use number for convenience. So the hacker must start with number and try simple password hacking for each password. If our password is composed of 8 alphanumerical digits or more. It should be okay.

YH