Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Toll fraud and VSC-Express

Hi guys,

Yesterday i receive a ticket from a customer. they say that are receive toll fraud calls .

From *@s to 4420037745918107*@d

I check the search rules and aparantley all the routers matches and must block the calls "see attachament"

But i found that the fraud call match another search with a priority of 100.

here the trace call :

Search (142)

State: Completed

Found: True

Type: SIP (INVITE)

CallRouted: True

CallSerial Number: 276f1f00-55ec-11e3-a3e3-0010f320813c

Tag: 276f20ae-55ec-11e3-8852-0010f320813c

Source (1)

Authenticated: False

Aliases (1)

Alias (1)

Type: Url

Origin: Unknown

Value: *@d

Zone (1)

Name: DefaultZone

Type: Default

Path (1)

Hop (1)

Address: 197.134.z.x:7098

Destination (1)

Alias (1)

Type: Url

Origin: Unknown

Value: sip:4420037745918107*@d

StartTime: 2013-11-25 17:10:51

Duration: 3.58

SubSearch (1)

Type: Transforms

Action: Not Transformed

ResultAlias (1)

Type: Url

Origin: Unknown

Value: 4420037745918107*@d

SubSearch (1)

Type: Admin Policy

Action: Proxy

ResultAlias (1)

Type: Url

Origin: Unknown

Value: 4420037745918107*@d

SubSearch (1)

Type: FindMe

Action: Proxy

ResultAlias (1)

Type: Url

Origin: Unknown

Value: 4420037745918107*@d

SubSearch (1)

Type: Search Rules

SearchRule (1)

Name: Traversal Zone Search Rule

Zone (1)

Name: TZtoVCSControl

Type: TraversalServer

Protocol: SIP

Found: True

StartTime: 2013-11-25 17:10:51

Duration: 3.57

Gatekeeper (1)

Address: 10.42.z.x:25467

Alias (1)

Type: Url

Origin: Unknown

Value: 4420037745918107*@d

I attach screen shoot of the traversal zona search rule .

It seems that * wis not a wildcard for the VCS-E and is treat like another carachter.

I created an specific rule 442.+$ and now i block the calls.

Any ideas?

Thanks

Carlos

  • TelePresence
1 REPLY

Toll fraud and VSC-Express

This thread may be of interest, using CPL to deny calls:

https://supportforums.cisco.com/message/4094490

/jens

Please rate replies and mark question(s) as "answered" if applicable.

Please rate replies and mark question(s) as "answered" if applicable.
350
Views
0
Helpful
1
Replies
This widget could not be displayed.