Digital all the way through. No sip. No outside access to the PBX subnet either. Just a mininute ago our telco has verified that the calls are not orginating from out phone system. It's a simple caller id spoofing. People don't realize that caller id can be spoofed and therefore are 100% sure that we are makign the harrasing calls. Just wanted nanog to be aware of this since the only two numbers that this has happened with are the ones in our ARIN whois records. ---- Matthew Huff | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139
-----Original Message----- From: Jon Lewis [mailto:jlewis@lewis.org] Sent: Wednesday, October 06, 2010 11:34 AM To: Matthew Huff Cc: '(nanog@nanog.org)' Subject: RE: Scam telemarketers spoofing our NOC phone number for callerid
On Wed, 6 Oct 2010, Matthew Huff wrote:
Our system is PRI based, not sip.
PRI for origination and termination...but what are your phones? Old school or VOIP/SIP? If your phone system supports SIP clients, it really ought to be IP restricted to only allow your phones access, or use something like fail2ban to stop the SIP scanners from eventually gaining access.
---------------------------------------------------------------------- Jon Lewis, MCP :) | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________