Obi508 Hacked

<< < (3/12) > >>

LTN1:
I don't have an OBi508vs so am not sure if it has a configuration to restrict calls to certain area codes.

I use a FortiVoice (formerly TalkSwitch) system for my work and it has the ability to restrict calls and limit calling privileges on a per extension basis. The cost of a professional PBX system like mine would be less than 4 OBi508s (phones not included) and if used with a SIP provider, like Steve suggests, would provide the lines and security that would likely save money and frustrations in the long run. Additionally, as a hybrid PBX, it can also be connected to a few OBi202s to use analog lines with GV. The benefit is that it can add a measure of security and call restriction on top of the OBis--assuming they were plugged into the FV PBX to add analog (in addition to SIP) lines.

How many concurrent lines does the OP really need? Seems like these kids are really being spoiled.

Personally, if I were running a camp like this, I would place a limit on the number of phones campers could use...and they'll just have to wait their turn. If, on the other hand, the camp is for rich spoiled kids, it doesn't seem like a big deal to factor into the price of the camp, the telecommunications cost for these campers, if it has to go that way. If so, I would go with a SIP provider as Steve suggests. But for security purposes, I would go with a PBX that has additional layers of security like call restrictions (or call blocking) and a per extension privilege restriction.

sp508:
Just to clarify. I am not using four OBi508s for the campers. One OBiis in the city office and three are at the camp. Of the three at the camp, two are used for the business offices and use PhonePower. The third OBi is used for campers. Last summer they too used PhonePower.

This summer I was thinking of using GV for the camper lines to save myself the PhonePower cost. I did not realize it that it is against ToS. I will look into your suggesting or go back to PhonePower for the kids.

BTW: It is a not-for-profit camp. Kids aren't spoiled - they are great kids. The idea was mine because I am a techy kind of guy.

I do use one GV for myself and SteveInWA had mentioned that there is a way to harden OAUTH. I am interested in how to do that.

sp508:
THEY HACKED ME AGAIN

Even with all the setting changes that you recommended they just hacked me. HELP, what should I do??

I did the following:

http://www.phonepower.com/wiki/Obihai_Lite#Disable_Direct_IP_Dialing

X_AcceptSipFromRegistrarOnly (if you find this setting, check the box and save your settings)

Taoman:
Quote from: sp508 on March 07, 2016, 07:07:25 am

THEY HACKED ME AGAIN

Even with all the setting changes that you recommended they just hacked me. HELP, what should I do??

I did the following:

http://www.phonepower.com/wiki/Obihai_Lite#Disable_Direct_IP_Dialing

X_AcceptSipFromRegistrarOnly (if you find this setting, check the box and save your settings)



Wow. Just woke up and I haven't had any coffee yet so I'm not thinking too clearly at this point.

Are you forwarding any ports in your router?
Do you have your OBi in a DMZ?
Exactly what kind of router are you using? (make and model)
Who is your ISP and what modem is being used?

Can you describe in detail (and maybe with a diagram) your entire network? Show the signal path between your OBi and your ISP. Are there ANY other points of entry into your network besides from your ISP?

Without coffee that's all the questions I can think of right now.

PS. Just out of general principle I would be changing all my passwords on all my devices to something VERY complex. This may be a brute force dictionary attack.

LTN1:
Just wondering if there is a malware on the OP's computers so that every stroke or change made is readable by the hacker? If that is the case, changing to the most complex password will not help if a hacker is able to determine what exactly is being typed.

I would try (this is just brainstorming) to use a completely different laptop to change all the passwords (to a complex one at that) and see if that will prevent any hack.

I would also do a malware scan of all camp related computers and laptops...including personal devices used in the past to make the changes.

One should not rule out an internal hack or at least someone having access to that person.

Navigation

[0] Message Index

[#] Next page

[*] Previous page