SIP Gateway -

Yort Mantup · ‎07-19-2013

We had our SIP trunk connected to our CUCM 8.5 hacked into last month for two days before the phone carrier issues blocks to stop the calls. When I look in CDR it shows only the calls as coming from an unknown but in a rapid fire format. I did some research to help determine how this occured. I checked unity to ensure that the restriction tables are setup correctly which they are. This piece I do not understand is our voice network is not on the Internet. What are the ways our voice network can get hacked if not thru the internet and not internally?

paolo bevilacqua · ‎07-20-2013

Most likely is from the internet, even if it is not clear to you how. Other possibily is that somehow you can get dialtone calling from PSTN.

kaja_2kj3 · ‎07-20-2013

Hi,

In additon to paolo, may due to following reasons,

1. you didn't use the trustlist of the sip provider ip address in your gateway

2. your firewall may have a general rule to allow outside sip traffic to internal gateway, give a specific access rule to allow the sip traffic from the provider to your gateway.

Please rate if this helps.

Thanks