SIP scanners
ProfTech:
If disabling Obitalk solved your issue that's great, however even though the Obi doesn't allow the nomenclature 204.11.192.0/22 in the access list, I simply manually entered the addresses 204.11.192.20 thru .39 in my access list and haven't seen a problem. I think the field allows 512 characters and those are the only IP's I've seen pop up as registered. Just list the IP addresses with a comma separating each one and no spaces in the list.
lacibaci:
Ok. BTW, Callcentric just sent me their updated list:
204.11.192.0/24 (204.11.192.0 - 204.11.192.255)
66.193.176.0/24 (66.193.176.0 - 66.193.176.255)
tome:
Quote from: ianobi on September 06, 2012, 09:38:15 am
It may be worth looking at Peer Number in Call History to see what the scanners identity looks like. The scanners calling me at 2am used numbers like 100, 1000, 1001. I put this rule in one of my X_InboundCallRoute:
{(?|x|xx|xxx|xxxx|xxxxx|xxxxxx):} ...
It bans any blank caller id and any caller id less that seven digits. It's been working for me for a long time. Also can be worth changing your X_UserAgentPort from 5060 and 5061 to maybe 5070 and 5071.
I have gotten calls from odd numbers like "1" or "100" at stupid times. I also get ones from "unknown" as well. I would love to stop these.
First, for the X_InboundCallRoute are you talking about
Voice Services -> SP2 Serivce -> X_InboundCallRoute ?
And if so, I currently have "ph" (minus the quotes) in that place. Should I leave ph or add it to the end of what you have or delete it....?
For example when I am done should it read as below?
{(?|x|xx|xxx|xxxx|xxxxx|xxxxxx):ph}
Second, will this also stop the "unknown" calls?
Below are a couple calls from my log:
http://bgp.nu/~tom/pub/badcall1.jpg
http://bgp.nu/~tom/pub/badcall2.jpg
lacibaci:
If your current entry is ph or {ph} change it to:
{(?|x|xx|xxx|xxxx|xxxxx|xxxxxx):},{ph}
Lac
tome:
Quote from: lacibaci on September 09, 2012, 12:28:02 pm
If your current entry is ph or {ph} change it to:
{(?|x|xx|xxx|xxxx|xxxxx|xxxxxx):},{ph}
Lac
Thanks. Should I add this to both SP1 and SP2 or just SP2. ph, says ring the Phone Port if I am not mistaken, yes? So if I have it blank, as you do, is ph implied?
Also do you know how to also get rid of calls from "unknown"?
Tom
Navigation
[0] Message Index
[#] Next page
[*] Previous page