[clug] what do I do if I'm being hit by a foreign server?

Paul Wayper paulway at mabula.net
Mon Oct 18 01:24:32 MDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/18/2010 09:40 AM, Kim Holburn wrote:
> I'd call your ISP and ask them to block the port for now if you're not using
> VOIP so you don't end up paying for the incoming bytes.
> 
> Sounds like one of those VOIP attacks.  They try and make phone calls through
> your system and you get charged for the calls.
> 
> http://www.zdnet.com.au/thousands-lost-in-rising-voip-attacks-339306478.htm

I phoned my ISP (Internode) asking what I could do to make sure this kind of
attack didn't get to me.  They recommended what I should have thought of: make
sure your firewall allows SIP (5060:5061) only between your VOIP box and their
SIP server (in my case, sip.internode.on.net).  It made me feel a little bit
embarrassed that I hadn't thought of it, but I really am still learning how
SIP works.

HTH,

Paul
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAky79jAACgkQu7W0U8VsXYIpJgCfUwl+wykVqUwa/MquPFKAvLz8
T8UAn00Iu9Vib+1nrPfC2fPhjsA7frm5
=pWK9
-----END PGP SIGNATURE-----


More information about the linux mailing list